last executing test programs: 47.354160543s ago: executing program 0 (id=1743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x52}]}}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x38, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2}, 0x10) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r7, r2, 0x2, 0x0, 0x4000}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) 47.123794718s ago: executing program 0 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001914000000110001"], 0xd8}}, 0x0) 46.937597476s ago: executing program 0 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x4, 0x2, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x102, 0x3, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='writeback_bdi_register\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r5 = accept4$ax25(r4, 0x0, &(0x7f00000003c0), 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000400)={0x6, 'nicvf0\x00', {0x4}, 0x2}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000a00)={0x0, 0x6, 0x1, [0xfffffffffffffff9, 0x2, 0x1, 0x2, 0x5], [0xffffffff00000000, 0x7, 0x4, 0x1, 0xe7, 0xffffffffffffffb1, 0x2, 0x1, 0x6, 0x2, 0x1000, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xd, 0x5, 0x2, 0x4, 0xfffffffffffffff8, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x91, 0x4, 0x9, 0x6, 0xffffffffffffffff, 0x637, 0x2, 0x101, 0x7, 0x6, 0x7fffffff, 0x5, 0x80000000, 0x5, 0x1ff, 0x9, 0x0, 0x4, 0x100, 0x9fc9, 0x5, 0x1, 0x5, 0x8, 0x9, 0x80d, 0x81, 0x5, 0xc16, 0x7fffffff, 0x2, 0x9, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xcd1d, 0xfffffffffffffc01, 0x8, 0xb4fda58, 0x7ff, 0x8b7a, 0x0, 0x2da5, 0x3, 0x8000000000000000, 0xd, 0xf6, 0x200, 0x5, 0x5, 0x7, 0x13, 0x101, 0xa, 0x7fff, 0x5, 0xff, 0x100, 0x6, 0xd1, 0x7, 0x1c000000, 0x1000, 0x4, 0x401, 0x1, 0x20080000000000, 0x6, 0x1, 0x2, 0x8, 0x9, 0x8, 0xd9f6, 0x0, 0x7, 0x7, 0x81, 0x4, 0x81, 0x0, 0x4, 0x4, 0xffffffff80000001, 0xfffffffffffffffa, 0x80000001, 0x6, 0xfff, 0x6, 0x2, 0x2, 0x3, 0xde2, 0x916, 0x3]}) recvmsg(r6, &(0x7f00000002c0)={&(0x7f0000000440)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000500)=""/226, 0xcd}, 0x102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (fail_nth: 6) 33.416903064s ago: executing program 0 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x4, 0x2, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x102, 0x3, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='writeback_bdi_register\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r5 = accept4$ax25(r4, 0x0, &(0x7f00000003c0), 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000400)={0x6, 'nicvf0\x00', {0x4}, 0x2}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000a00)={0x0, 0x6, 0x1, [0xfffffffffffffff9, 0x2, 0x1, 0x2, 0x5], [0xffffffff00000000, 0x7, 0x4, 0x1, 0xe7, 0xffffffffffffffb1, 0x2, 0x1, 0x6, 0x2, 0x1000, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xd, 0x5, 0x2, 0x4, 0xfffffffffffffff8, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x91, 0x4, 0x9, 0x6, 0xffffffffffffffff, 0x637, 0x2, 0x101, 0x7, 0x6, 0x7fffffff, 0x5, 0x80000000, 0x5, 0x1ff, 0x9, 0x0, 0x4, 0x100, 0x9fc9, 0x5, 0x1, 0x5, 0x8, 0x9, 0x80d, 0x81, 0x5, 0xc16, 0x7fffffff, 0x2, 0x9, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xcd1d, 0xfffffffffffffc01, 0x8, 0xb4fda58, 0x7ff, 0x8b7a, 0x0, 0x2da5, 0x3, 0x8000000000000000, 0xd, 0xf6, 0x200, 0x5, 0x5, 0x7, 0x13, 0x101, 0xa, 0x7fff, 0x5, 0xff, 0x100, 0x6, 0xd1, 0x7, 0x1c000000, 0x1000, 0x4, 0x401, 0x1, 0x20080000000000, 0x6, 0x1, 0x2, 0x8, 0x9, 0x8, 0xd9f6, 0x0, 0x7, 0x7, 0x81, 0x4, 0x81, 0x0, 0x4, 0x4, 0xffffffff80000001, 0xfffffffffffffffa, 0x80000001, 0x6, 0xfff, 0x6, 0x2, 0x2, 0x3, 0xde2, 0x916, 0x3]}) recvmsg(r6, &(0x7f00000002c0)={&(0x7f0000000440)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000500)=""/226, 0xcd}, 0x102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (fail_nth: 6) 23.295464358s ago: executing program 0 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x4, 0x2, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x102, 0x3, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='writeback_bdi_register\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r5 = accept4$ax25(r4, 0x0, &(0x7f00000003c0), 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000400)={0x6, 'nicvf0\x00', {0x4}, 0x2}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000a00)={0x0, 0x6, 0x1, [0xfffffffffffffff9, 0x2, 0x1, 0x2, 0x5], [0xffffffff00000000, 0x7, 0x4, 0x1, 0xe7, 0xffffffffffffffb1, 0x2, 0x1, 0x6, 0x2, 0x1000, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xd, 0x5, 0x2, 0x4, 0xfffffffffffffff8, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x91, 0x4, 0x9, 0x6, 0xffffffffffffffff, 0x637, 0x2, 0x101, 0x7, 0x6, 0x7fffffff, 0x5, 0x80000000, 0x5, 0x1ff, 0x9, 0x0, 0x4, 0x100, 0x9fc9, 0x5, 0x1, 0x5, 0x8, 0x9, 0x80d, 0x81, 0x5, 0xc16, 0x7fffffff, 0x2, 0x9, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xcd1d, 0xfffffffffffffc01, 0x8, 0xb4fda58, 0x7ff, 0x8b7a, 0x0, 0x2da5, 0x3, 0x8000000000000000, 0xd, 0xf6, 0x200, 0x5, 0x5, 0x7, 0x13, 0x101, 0xa, 0x7fff, 0x5, 0xff, 0x100, 0x6, 0xd1, 0x7, 0x1c000000, 0x1000, 0x4, 0x401, 0x1, 0x20080000000000, 0x6, 0x1, 0x2, 0x8, 0x9, 0x8, 0xd9f6, 0x0, 0x7, 0x7, 0x81, 0x4, 0x81, 0x0, 0x4, 0x4, 0xffffffff80000001, 0xfffffffffffffffa, 0x80000001, 0x6, 0xfff, 0x6, 0x2, 0x2, 0x3, 0xde2, 0x916, 0x3]}) recvmsg(r6, &(0x7f00000002c0)={&(0x7f0000000440)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000500)=""/226, 0xcd}, 0x102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (fail_nth: 6) 11.448168406s ago: executing program 0 (id=1748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x2, 0x4, 0x2, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x102, 0x3, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='writeback_bdi_register\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) r5 = accept4$ax25(r4, 0x0, &(0x7f00000003c0), 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000400)={0x6, 'nicvf0\x00', {0x4}, 0x2}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000a00)={0x0, 0x6, 0x1, [0xfffffffffffffff9, 0x2, 0x1, 0x2, 0x5], [0xffffffff00000000, 0x7, 0x4, 0x1, 0xe7, 0xffffffffffffffb1, 0x2, 0x1, 0x6, 0x2, 0x1000, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xd, 0x5, 0x2, 0x4, 0xfffffffffffffff8, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x91, 0x4, 0x9, 0x6, 0xffffffffffffffff, 0x637, 0x2, 0x101, 0x7, 0x6, 0x7fffffff, 0x5, 0x80000000, 0x5, 0x1ff, 0x9, 0x0, 0x4, 0x100, 0x9fc9, 0x5, 0x1, 0x5, 0x8, 0x9, 0x80d, 0x81, 0x5, 0xc16, 0x7fffffff, 0x2, 0x9, 0xb, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0xcd1d, 0xfffffffffffffc01, 0x8, 0xb4fda58, 0x7ff, 0x8b7a, 0x0, 0x2da5, 0x3, 0x8000000000000000, 0xd, 0xf6, 0x200, 0x5, 0x5, 0x7, 0x13, 0x101, 0xa, 0x7fff, 0x5, 0xff, 0x100, 0x6, 0xd1, 0x7, 0x1c000000, 0x1000, 0x4, 0x401, 0x1, 0x20080000000000, 0x6, 0x1, 0x2, 0x8, 0x9, 0x8, 0xd9f6, 0x0, 0x7, 0x7, 0x81, 0x4, 0x81, 0x0, 0x4, 0x4, 0xffffffff80000001, 0xfffffffffffffffa, 0x80000001, 0x6, 0xfff, 0x6, 0x2, 0x2, 0x3, 0xde2, 0x916, 0x3]}) recvmsg(r6, &(0x7f00000002c0)={&(0x7f0000000440)=@isdn, 0x80, 0x0, 0x0, &(0x7f0000000500)=""/226, 0xcd}, 0x102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) (fail_nth: 6) 5.51007213s ago: executing program 2 (id=2157): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x1, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0xff, 0x0, 0x0, 0x0, "a67494fcd3a42289"}, 0x7}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfe, 0x15, 0x27, 0xfd, 0x0, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b72bb3c7cced18fae7289635301ebd8949268090a7bcd496defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4529d4587eee87ec5d42c3ef0619022c00", 0x2, "5c8d706b930fca1502005d29e5b2ea00"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.339982755s ago: executing program 2 (id=2158): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="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"/471], 0x140}, 0x1, 0x0, 0x0, 0x4002010}, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f00000006c0)=[{{&(0x7f00000001c0)={0xa, 0x40, 0xc, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1b, 0x0}}], 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x8000010, 0x25dfdbff, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r12, 0x801c581f, &(0x7f0000000340)={0x1, 0x7, 0x1, 0x2, 0x65}) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000000)={r11, 0x6c64}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000180)={r11, 0x101, 0x101, 0xffffffff}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r13}, 0x10) 4.405066593s ago: executing program 2 (id=2168): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x1, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0xff, 0x0, 0x0, 0x0, "a67494fcd3a42289"}, 0x7}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfe, 0x15, 0x27, 0xfd, 0x0, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe16c93e15baed7f897fe841c155aab2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b72bb3c7cced18fae7289635301ebd8949268090a7bcd496defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4529d4587eee87ec5d42c3ef0619022c00", 0x2, "5c8d706b930fca1502005d29e5b2ea00"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.247481614s ago: executing program 2 (id=2171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 4.074216492s ago: executing program 2 (id=2173): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x885) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x9, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x80, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.373947224s ago: executing program 1 (id=2181): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000100000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xc, &(0x7f0000001e00)=""/4087}, 0x90) 3.314483721s ago: executing program 1 (id=2182): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0, 0x124}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 3.132889481s ago: executing program 2 (id=2183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x8c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x76, 0x6, "e8a470184d111ec2c361b380101329783a74d83e42cc0a1bf396fcab1e7fb000f1581713612e1791a5f3c104237bce6cd96062286dd378455e56b457fc0a94fe06dae1ca10fdae968204280f00ab4c50e98a4e43ff5f4d90fb55f7c4fd5e78f88e14df38a71988b89971fa4bfaeb9611f76a"}]}, @NFT_MSG_NEWFLOWTABLE={0x0, 0x16, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'bond_slave_1\x00'}, {0x0, 0x1, 'batadv_slave_1\x00'}, {0x0, 0x1, 'veth0_to_team\x00'}, {0x0, 0x1, 'bridge_slave_0\x00'}, {0x0, 0x1, 'dvmrp0\x00'}, {0x0, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x7cd6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'syz_tun\x00'}, {0x0, 0x1, 'ip6tnl0\x00'}, {0x0, 0x1, 'veth0_to_bond\x00'}, {0x0, 0x1, 'veth1_to_hsr\x00'}, {0x0, 0x1, 'pim6reg1\x00'}, {0x0, 0x1, 'tunl0\x00'}, {0x0, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM]}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'pim6reg0\x00'}, {0x0, 0x1, 'wlan0\x00'}, {0x0, 0x1, 'ip_vti0\x00'}, {0x0, 0x1, 'geneve1\x00'}, {0x0, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x40000}]}, @NFTA_FLOWTABLE_NAME={0x0, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x160}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0xdba605b6e5f1e6bb) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r5, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000026002307"], 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x8000) bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xac}}, 0x0) unshare(0x6a040000) r8 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x61e5, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x800}, [@tmpl={0x44, 0x8, [{{@in6=@loopback, 0x4d2, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r9 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004300)="dc53410c028336dd2edc80341a8ed1eddb7a666f426f671c2334281380dd7b98", 0x20}, {&(0x7f0000001e40)="4cdd3b8b18257694ae8b637b5c4147d1a6dd59775e694104a33f3f06f1136766", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee95cf0d0d5585e3279efe4fd0b6dafb93eee8b0afc609e87ce7a60ead47b8048d24b39011f56d7a3e1e368152a5125e29020a8fa7d4910a423ba628d2adf685f7851c5ac3c9d7997b095928fdec5153e90eaf25", 0x57}, {&(0x7f0000006cc0)="9adaf615e5f5caf2dbb930eb4bcf83a7d5ab7d2880e4d75510dc058f0589b593507d47a2ca9b9e99e17e94105b4e27d6d5d400a38307094ba788d8e215f310fdddb0ca1e2c967def94c13173db119bbdeac74519", 0x54}], 0x2}}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007300)="f572878c7aefc200e078de78443fc4311bb2a13cf61d1e996f971ab8d5877415908a51a4b6bdbdb894e6249076291816fd2802903228a988ffcb56631062bc03b6746ec5c74348c7676ee2286ffc8da5b067d95680006add570c0ff956bfc76ad826ddbfac9d21f02a27f380600eb887e680b3b16351cfa1d0bac3d2ae824799bd33026c015f12fbf26d015ae8f7a3d4e390c3228ffa49dbf546035f34a324ee5f6508f20e799d6fac80b3e283eb1e5e6bde74c36a16a94ecf30e49205a02c96502764a2d1f073f9a8fc52d14344c3660adf23b8b5ced27702066b465619", 0xde}, {&(0x7f0000007400)="2007958f55c3d9b287d30db0fb5ae3315c802a94fd6b45d491c96f01932d498bf38d4f4a939c2dda011380827e0027e5b1550379df10d44eae40bc853e152b6d0b639e15585c6a1a02f872741c1f19c86ca55a3f912a7dadf2922bfbf003af2c5a417734db649c805cd509", 0x6b}], 0x2}}], 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4730d}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x1}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x198, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6bed348}]}, @NFTA_CHAIN_USERDATA={0x2b, 0xc, "77dc195bac7bbcac1889e525035e26c4ad8f8d93805704e8f62184d276165d969278ca8e97dbfe"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xf6, 0xc, "e11dc220210efed7b76fe586722afd7afe4e5febf2e92d9c9d4e52ede1e2f33c966d5bffc2ab75f97aab17b602d9b003137d338700f53356c7b2b772fe81702152b27c2d254dffb086de42e160b45812d0debc15d4dc7afb1846949e5b71a5304c069ebfdcbb651a8bd08930b30bb0a282cafc4b40363e759cb514e248125de4b94decac9f85adfa2f238b1a2ce4d8367083234869ea98969202eb1aba80a7980b303cd3abe9e5d0b52314913ee8617364626ba11f621952e0f4663980856b778f497317d9c03fdd588f620343e8e34a1f2825b85756b1958aed25341c79807f8ce9a0b53bd9e67ba7f4171e539aa6c37b0b"}, @NFTA_CHAIN_USERDATA={0x41, 0xc, "160450d1088d20d25a2bcf4e64aa62ffd72946709d832b35a89266f0373124a16d474dd65ba79a5dc884643c473791cccd029ebe62d5e9cfc6905babf9"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1e0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 3.003974786s ago: executing program 1 (id=2184): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.963218825s ago: executing program 4 (id=2185): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.67535746s ago: executing program 1 (id=2186): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x360, 0x11, 0x148, 0x360, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x570, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x2, 0x80}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 2.581117258s ago: executing program 4 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7520}, 0x1, 0x0, 0x0, 0x4800}, 0x1) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) connect$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28309000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fbdbdf250500000008000300", @ANYRES32, @ANYBLOB="93235e469cca0c2ff0b67526bb37aa20af6f646233b60c3de483316997e90dfe3d02c4d737027f5db677889e0de4615c7d08d8a4dcf73e25d5e55f2a718393d3d9f16d4c2a8246e18524fdb1835c42f5a9fa7b34fef97c3ef59a4ab1c302822a66064c5b6e7c4a5254082610a2fbd85cd489025cbabdb2976380"], 0x1c}, 0x1, 0x0, 0x0, 0x8040810}, 0x20000000) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.420312532s ago: executing program 1 (id=2189): r0 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x61d9, &(0x7f0000000000)={0x700, 0x9, [0xa5a, 0x0, 0x1, 0x3, 0x7]}) 2.41225624s ago: executing program 3 (id=2190): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x5, 0x10, 0xffec, @remote, 'vxcan1\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x23}, {r1, 0x80}, {r0, 0x8004}, {r2, 0xb008}, {0xffffffffffffffff, 0x20}, {r0, 0x40}, {r0, 0x10030}], 0x7, &(0x7f0000000100), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'pimreg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x6c, 0x2, 0xc, @remote, @mcast2, 0x20, 0x20, 0x2, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)={0x3ec, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x5d, 0x3, "1449c53206216092b58c925dfbdc7c69a5af94ae73604b57fd0167ce05b28ccab1e0b0f1eefc0b1fd2a930ced28e67cd76635d7d0853144b50b9f7cb0a7290a8663b3c6626d79a98278be2e3d2ee4bc69bc322e09d2d47560a"}, @ETHTOOL_A_WOL_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_WOL_MODES={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "618696b2b770109814ef7acf08f199a1ff36468bd3c8b5ef9575af8f9f0c430e0a6c582b16d8f5d2c05d05ca36d32acb7abc8a31994841f545dcc3b8968df3ce74293229af2315460dd5e90b47f1c1d0c677013d49d673ad23eadf69e83a2eeaa3fc449e7456818369b4898d15325c733868ab16329e1796ca0bf7a5291ce1233a1f5a8dda50f602d4f3d19bb37c197a79325b7c16ac19"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "9fcf"}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "29205e8b8501ecb5225003b6729a5e5fdec5b7d83828abe997df8986fa7148c0a763c5bce4b2ddeaef02aee6c8cb4122bf13ae1eee7a5d97ea491a93c3135e608f41fcfb9301e4a4c3a8687dbfada9ffecfa2d46d9ad4e7080330aedd1ee1e97e833ad1606b1ebc387edc5d209ae"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x441e37d6}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_WOL_MODES={0xd0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!))\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_WOL_MODES={0x68, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x64, 0x5, "422a2aff750b1960ea2f76d90c47812c53a57a93e87968e93ac2bceacabd3b99befe7ad6adbf1ec5f8b152c874a7e463b47f76635a17d97e23c4c639e50165cb2e54bccd59479a71f3970090a207ee5b3b833d182c066e35043be30cac0d6973"}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x10}, 0x8810) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000a00)={0x71f, 0xffffffffffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) writev(r2, &(0x7f000000b980)=[{&(0x7f000000b5c0)}, {&(0x7f000000b640)="ed55cdaac3808ed23b5d94686cb20126314cb5f2cc76eee11c4d54c3a6421b3f831402d9635610799a117acf5e3eaf07f275db570ce46e8e689baf41f217748be8d580093f082cb0a58986d74bb547b668363b66da5e80cd9a80b3e0bff263a53121cbc39b9e42c6fa85e397a80902f9ca229b21b4a8fd3f577249002e0437f690", 0x81}, {&(0x7f000000b700)="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", 0xff}, {0x0}, {&(0x7f000000b900)="9b7a6a637c2f0eac570e26631bf119dd58c1461442189c9046e7488f3d20c93c58b8320cc576c9d3cad882845ab61b13ed1b52f62f65d59a65527094628876e1221b7b0678c3faa4812f0322870245ec1f9cc32ef50296a2d001f319b9e142378d443ce9326f6a1e208293f4f9fc32a99e0734e8", 0x74}], 0x5) r9 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r9, &(0x7f000000bec0)={&(0x7f000000ba00)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f000000bdc0)=""/194, 0xc2}, 0x40011043) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bf80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f000000f380)={&(0x7f000000bf40)={0x10, 0x0, 0x0, 0x80008800}, 0xc, &(0x7f000000f340)={&(0x7f000000bfc0)={0x2a6c, r11, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x45}}}}, [@NL80211_ATTR_BEACON_HEAD={0x5d7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @random="ceddcf633073", {0x7}}, 0x7f, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x4, 0x6, {0x1, 0x1, 0x9, 0x3}}, @val={0x6, 0x2, 0x3}, @val={0x5, 0xdc, {0x9, 0xc6, 0x88, "6e0ab55500d3d5c0e2f69e21abcd03764732d4ff77e60327ab67da1337ea4c3b9558a7051fbfb75fd19215996fe3e0050beba46d1bb2f49ec00404d68c310219402eedfd93fd4323e1249c6198cd7f871fecd0774db81cce83eebb69ca09dcb4a030b36f9d0ae2e83338716c1d61e33146d3502f7f6bf2fbd526a036da00cca33f4af0a227dfb4865bf7c3995fa03db0954175019c65a2524757ef7b6ba345861d881f37150a77d876000879eb7224f906841d544b054ba6d12dafee14f2117ccc041495d4b0cd2bb9bcb65b8fc1619b133d54d93113c37444"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0xc, 0x7ae7e5d0f67aaa2a, 0x5}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xba, 0x20}}, @val={0x76, 0x6, {0x7, 0xe, 0x3a, 0x8}}, [{0xdd, 0x90, "feceb1d91fba33ef159cba40e3f8b4787f26f5f2863a31651570b48183b223002a6d217fabcfda039802dabd5fd8b9e5e55796b464c71fd4ef4d9cc50993746b26851ad8f9c9a8db8ac73727308b1144ce53d8051ad98901f5b6ba262d713e004e2fcc34f921f2a62a152b656e27e649c7a8404582894e3931d00bd86c2047a9dcd6f77f5dd26b75a5c2e9443a43f063"}, {0xdd, 0xc7, "02f2603a28dfc812efe7463f6895eb97a668c2a65fe3048a43fd2803e97397cade67c9496b8e8533e2d74c969ed1ba99aae0f8a947ded6c328e8bdbc3bb9a0a61d043b364822b03ead15c7644e9db1c8ca3882f5964a3e5b5b061c5e752ca08ab75584b9c007405478a7b4eef71e3bf62a023769fdac672e1c633f03863ed2a372bb1659549be3a0318815cdb3ef65291d9eed14449dffbcf016dc592920ea2581503de473737be3dfc94a7d2701984b357469ccf560204fb605378072fe23c93db91d65097457"}, {0xdd, 0xba, "1c5c8991876fa6880994f3cbfe936fc75e25ad9e5812b46732925ec48bf95cac417815c9339a3b1aa8298413319dae18b610ead0bb8b7ddb559505d546ff99d97cb8f2ffc2e32e49494fb594830d980c7066767da0636f1c69cb204a5629834a8145583478e371af9579387f8197b0aedc602b728187c5639cae05d69f375e3b2511966ccc641a614f929558a6ea8c9adb7d6b54d68f1d71175751569663be19cbedc58a52b7fdd3f1357090b9a4d260ba651985d89b9130ed5f"}, {0xdd, 0xce, "e561d8f06a3b6e339f746448acffaa30cc16e1410e03ae899ff9d1eef3a40136e68a157a066b43018f192105c2b64c99b2b6a425c8126567e8e8a80f21e8602b15840436757f40b0fde8f8ec0d7ba62f982ab8fb95dbaf867af5e0b96eaa637f801722eb5f501bc0d8bd8441362b619e49583566275d6c5fe8ff03397d19d2b0f6a7428d21376fea938446833020cc0c6e2f24ebc08745d7c7fd07d34b446c4faa3b0a4b71b4a64ad45d910f0ff53676bc97aa30ca0d0075be65fbfeceaa088b5903d1f6853c026901e498cf1254"}, {0xdd, 0xcb, "72a22c886ed648ce567b9b78725e6b95d2d3d9431256eb7cf8df17773b56e0da60e71cb4605d55301fc61c5cc3f5c49b7b1ef65936d31f827c89d9343d7a5fb2cd1e952b23dc1550a3b09b91ceb0e8dde2dd468fabb47653d87bc6843ee25d92eca674f0330ccdb8e49ddbc6caf6a1115a6b921de74d5c91eb20110cce508e4778c307bcb451e323b9ff5141a85f4660203f85af8441d9a318e3f4fd0ca9207097f37c157f3a404129fb68b5a9a6447e13a3b28d28f5b8955d68cf2fdd3a2166fbdec2ff205b38284da2ac"}, {0xdd, 0xc3, "14ccb54c8174510eb57d4f069cc61643ffbe71992ff80f0db8fe3c8f236dd3812fd268d9224694409bb1d90e2482e1dba63a72b9e2e156f88de7dc392ed4e79bc759bdee5a1f8830b97618a0ca510df56b03a2423950c1b3ba5b9961ab38c2917f6324e12d74e9d940c6e0b44054dc458d7449577f22ccb85ae5e61838df0bddb2bdeef32f2b98f0412fb1f34230e9749b7577bd5ab1e4814393c4efd318dbd4461babb894397b85c4ca8cd5d24b57839a747214d0aba3bfe9edc2d880b5a95935ef1f"}, {0xdd, 0x29, "2ae7f0588701ab50ecd92c5c41614d885d0ee1d27407d799ff438faa8512fae85880c959622fbd1f02"}]}}, @NL80211_ATTR_BEACON_HEAD={0x3b4, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @random="5e0875462a96", {0x8, 0x7f}}, 0x5, @default, 0x9, @void, @val={0x1, 0x3, [{0x16, 0x1}, {0x2d, 0x1}, {0x2}]}, @val={0x3, 0x1, 0x7}, @val={0x4, 0x6, {0x2, 0x4, 0x2, 0x1}}, @val={0x6, 0x2, 0x800}, @void, @val={0x25, 0x3, {0x0, 0xae, 0x1}}, @void, @val={0x3c, 0x4, {0x1, 0x2, 0x84, 0xc}}, @val={0x2d, 0x1a, {0x80, 0x2, 0x1, 0x0, {0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x8, 0x1d, 0x7}}, @void, @void, @val={0x76, 0x6, {0x2, 0x5, 0xe, 0x5}}, [{0xdd, 0x69, "c14f7959081f50c86972ee089323f41220717c58877b34307e0a60669dfe7ba18f520681f04a065a0a5d7277ba54110f71eb336ff513efde2cba5c29766b8986028442687876f7ce2c3efffc758969d9b5daee0fc6b5c0be43ff1d00f11add46bd19b20152bc1a1140"}, {0xdd, 0x8b, "fcae0ac3a7101644229e0bb6f0319b407b100f71b4e66163c604a1114a272033b3b11e9778ac8a12286e247f13ba3a03cdbb56d737759e79aafa58acaf82a1c220c22b979d1e1429a0ee20d3882f3d56ced8979697d2fd0edbce91686d128a3abfd9a8287eae7b189be2c6fbf63de02c42616fe9874b537cee9c4b2ecc9439d57b816826a9225467e9c378"}, {0xdd, 0x1f, "337eb3b9f1c583c9894d0bb018c7c73660f913fc3ce4a2410422b23e0e7031"}, {0xdd, 0x99, "f0837c7c13ccc26832b3d87692cc93bd747fd0f0a866ec06c57ff48c6c0445caf883ad743e2f0b36b24d0e1217987f4fba540cc7f28d3cd371c81c620080803fcdcdab8a13650223e3d6f4456f245c42d87ac53b4f3360dc9716d3fb6f39befa93e2248d426c5fe5b6ee261385f1b14e34a4abc4843f25b6f599521d11264171753fc44cf8e2fa2b063165a228c29d9f63c572d3c323855cd5"}, {0xdd, 0xde, "9a627098cea7da17400ebf8262ee062e28356ab2b4667e59741abc5a757a5fd6a84bcdae71791825dea93b22e35d07261672dbe10c01f81a37f300e3d0f8099380cd0142a579bddc021031c323996a7b49a1dacb4e699c836eb660ca692ac6ab30363ddfbc5562b381afff342bbf411c24c5ead6592818859fa645c43de8c212fe83c5d092d5381f2c347b69629afc46866f323af13131a4b134b720da070074c76eeb929edc1ece166ce645f2c19085d5ee891463c1dfccfb8fbd8a9e1807724fcf8afa40541b558e56b550279d71dd59e1b1784ea4f2967875dc54f8a5"}, {0xdd, 0x78, "e21b27babe2aae48c7a89d2cec677e5c1122b6fbde197927e6f2c1e1c7f0a8a246c28eba400c2fed7624d719ef5ce2a481256c47d86b81275652e2216da4f65fc376e6c3c4d83340d57d835f178ca9fec97e81608f1090d168bb639008dd1ae15076a89d62d93090d56caadd29a5b81621902205d0105bfb"}, {0xdd, 0x39, "b2446cf3ab87f7a8a3e60034556bc43c99fa9334bdbb71fdb8647ee161fcc89b17f1ba385a05f12c37c8119fd0f322346088178ea638594052"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x1f4, 0x7f, [@perr={0x84, 0x133, {0x4, 0x11, [{{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x3aa, @value=@broadcast, 0x3d}, {{0x0, 0x1}, @device_b, 0xfff, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0x2400, @value=@broadcast, 0x1f}, {{0x0, 0x1}, @broadcast, 0xc64, @value=@device_b, 0x42}, {{}, @device_a, 0x81, @void, 0x3}, {{}, @device_a, 0x1, @void, 0x17}, {{}, @device_b, 0xff, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x2a}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x20}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x12}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x30}, {{0x0, 0x1}, @device_a, 0xc0, @value=@device_b, 0x18}, {{0x0, 0x1}, @broadcast, 0x80, @value=@broadcast, 0x42}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x21}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x32}, {{0x0, 0x1}, @device_a, 0x8c85, @value, 0x23}]}}, @random_vendor={0xdd, 0xb9, "cd62b04d14d89cdc2ea0ca657ca48696a37b7f52d7e0d0b29b959c8a21ca8ddbf6ce245788f1b4b1647465bc9cb4a8eea0485c3057f8c9f024d50ab2189e7a5a5fca45accddbca5d4101de23cadb33ae9d9a4f0c0338cc69b51cd1241b03b95f843092aff2f737d2db9d03ef658e7689869e4d4ca00daa1a7a3f231378ed4a31516234c141f2013735600fa7bb9dba0965afd2589ffcfd70e855804acc95255143a2d005fe0dca7187615bc44501b0b4d539f92120de845f08"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1ac8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xff, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "8820e111953d7615e5302f3688c86240095663952a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc5, 0x3, "545e307e43b33d8757520a08ccdf2baf2a6c41d5851ce5f24b998c423ee1ac54216260ffbfc4a3fefd01a675039c72cf1ff7e69b660cda85bdc755d52ffc6f76045e7ace89d97b580839ab5d1708a2ac5a9dcad47d2c3f2501180a267a1b58d42a8b9cf5b8863fd7b3757dc786059c4e2f0aa9f5edff1cfc07fd4784c35dbe5b2fa54d8c4c36a2f9c24fadac530dbed073f2d2e78ad2411d523321481d0320328e6645a05e4da9fb66cd635d59739dc0a9d9be327c3da12732d4d7e185f6901016"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x784, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc4, 0x2, "cf91d544fbc7d6af9affb707ba1b22f12b386b41b4f8d223fb658d66790785988c3330a5b0146ed6d3aa511f9d1ff985ea456e71d0cbb308d605c0dd58dceef1d4e7f79749ff7f6290a9ba94bb158a4fcdaa39eccc380a79cc67b8c4875d366cca63f142f4cf8325e68f00e0cc85bcbddb006b3fb8e848df1d9f3e6cb63c31de7b5655a916bae46e9a3407254aba229b608c24093aaf00a6fb1b43398d38ace35c41d1d2cfa85be383a5ebc47d9c8a3b23f873ff8fb92c053e13d232562b758f"}, @NL80211_FTM_RESP_ATTR_LCI={0x8f, 0x2, "5a6a4a20355ff3651d6a150f9f234273774011ac395acef3df0d0216df380c7975c2d5ef1d4acf938d7418ced17a6848f054d1e91bf4ff861f9cce6de0e1a3209fdebee4cafc5c6ec96ef4dd92e53d89ac3e58501f403a7b44c294c2b58aa9b03d5a6b4575f58f69720f3429a080d4f446c24ccb62ae54cc7d714231068b4764e9143d1363837fad52a2a2"}]}, @NL80211_ATTR_FTM_RESPONDER={0x2e4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x29, 0x3, "e9a03432906156173ea53151d66f6ad045df14ff18b6765612259588210aa38101fedacd23"}, @NL80211_FTM_RESP_ATTR_LCI={0x90, 0x2, "787bb97610c136d41329e472b652e543c317dbb062e55941e362f47a1231b7a04b2bdf3910d7d654ddd14762c0503419906924e54c656877219fcf2c7fb631465f2ab9c1ba4cb81491a96983c3eaff031de874f0452fe877ed985c29dec38dd3960a202d06373938ef095448734d66b56929a923f5d071da3b77425f88b26968d925addbf6a53ab7a5868381"}, @NL80211_FTM_RESP_ATTR_LCI={0x78, 0x2, "9dd00c555999a7dc9eb40c40332d5afd6096cbdc0cd3d66effb08d5b24a2924a52e63896cf3906c4d6906f9c05cb38b62b76bb12d814acbee27c18f33c41797746a9e16e2134785ccd5a17f1afa4cbe893420b92606bfba30a1011c82db663d5e3d7cb78a133485b266b80fb6832722a41a0fa84"}, @NL80211_FTM_RESP_ATTR_LCI={0x58, 0x2, "a9368e4d56d3966502961ecbaa72e3f118e28efd58d2f03ab2b3037ad02e2d858cfd1e5910b33d6f7da139451fc516e6e536c31a7135aaa20a4069e26057b7755ed4d084cce1f6f399c70f693ac023673284340a"}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "749bf7d30c2a85bfa817cf9858dae9947a0ac2d9fca457d10ba12da645ae30f36a4e3a07fb8c8df07d3a0b7cd850863bc028dff00edbc061b562396803ed766b6938cb1f112c4d52df67b4cc5375d8de23b20f7b78254f3014c0dc1ae674adae9d0a812c1e80c36eefe62cb5b19557e145f48e62031bf7b1210c75d4b5734f62ffc65d9a5607554a00c40b220f87ce"}, @NL80211_FTM_RESP_ATTR_LCI={0xbf, 0x2, "4e6b33732c59644d4adaadcad3c9301bb243483494217e0e1d6bc6f6191d34558069e74af1d0d580e808a4aef05fecb5f9962dc367244173256d431559920ed45fd6626d88295593526e9558b09c31ebac6e0741679b7234856f2dbc8aad02f917fdeb4c4c3d42f2b8296ddb384dac76754c75474ce6f295146c2273d69071e63de1250ad4f709a830b03e714c5124994dd8716174c512f3ab17a814091d6786b2bdd350a8f4cc3624089acc6a9162b4f9dbc37e9ed729ae33d6ee"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4a, 0x7f, [@ssid={0x0, 0x18, @random="8bae11cd2d0657efc68b059a3d6aff0fb6e587e9154de1b5"}, @mic={0x8c, 0x10, {0xf30, "0f86cc780fb7", @short="97aa46e10acce80a"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf0, 0x3c, 0xee}}, @supported_rates={0x1, 0x4, [{0x36, 0x1}, {0x6c}, {0x6}, {0x6, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x0, 0xcc, 0x2e, 0x8}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0x16, 0x2a}}]}, @NL80211_ATTR_BEACON_HEAD={0xd4, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1ec8}, @broadcast, @broadcast, @initial, {0x5, 0x80}}, 0xa2, @default, 0x2000, @val={0x0, 0x1, @random="c3"}, @val={0x1, 0x2, [{0x60, 0x1}, {0x4, 0x1}]}, @void, @val={0x4, 0x6, {0x2, 0xa, 0x3, 0x6}}, @val={0x6, 0x2, 0x28df}, @void, @val={0x25, 0x3, {0x1, 0xa9, 0x5}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x1, 0x3, 0x1, 0x0, {0x3, 0x6, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0x3, 0x79}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x2, 0x6, 0x3}}, [{0xdd, 0x63, "602a34bb1c4398e192fd9a8bdcc92f52d91ecdd5a788a9701b87e7bc2a9b20c3fc147887c5042645dff5252aa70b38775aecd9d0d3da965f7ca3e93dc75051b3a02b165cc55cb4b3661aa9b136211bc1badf00a89f362fc12b106dfb91756eb4a051d4"}]}}]}, 0x2a6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008840) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r12, 0xb702, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f000000f3c0)=@assoc_value={0x0, 0x4}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000000f740)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f000000f840)={&(0x7f000000f400)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f000000f700)=[{&(0x7f000000f480)="257e9257fed609bbd5632b3ea354d01e0b58ea7ce0594f8b8652f85823eff528eb5e5e41f77fd7a9a9eb4f28c6eaa7a0e9b684b35b2cf5c04df40d7f5b8fd9eec675fc4695cbef4a750f50cf6bee0f32e1dec9429517c8ef709cbd84c23a113546b5570b7eeb6a", 0x67}, {&(0x7f000000f500)="148f2e1b2fa20ae6dbe6d118fb5ed46762b5da8dcef40d972d70155f25c1f2a07035e0d0f12eae0c15d1f97c6db99749ee49c42b6e8e9a4ec4fd48ab12bc92adf58de13bfe42c165e16c13734f9c1b65bd8b188243c82f58418f87d4e111ee9a27b908ef6a0fc05dad85eb9f3568470d897b3abde27eccfff88502c289d129daec210d0df3a0e584eb36a79b74691196d2b4ffef51aaab15b442585594", 0x9d}, {&(0x7f000000f5c0)="e9c8d544ca211ac6a9a9b4c432be6e3c7dd4efda75", 0x15}, {&(0x7f000000f600)="38eb247f8f7e4db2636653b46463dc8bb033f9f18c43838046141084449a2c8bb1afca6d3c50df14856e4cbb8aa2b737f5c2828fd04d3924f05a163a25c5fcdb2ac159681c3a2a0ca0835d5a1f6d9842163f3b5fb0a5db7eb9af61aae89cb97a7fa0753ed58414213061576396bc05dcb093d99bd587de6b9629233cb659b9fbb812af8f23905f54417106ed66898a7a852898df694a1cd74a599d4e8a1d43440f5372c4a746d03f3e0ee40b78da405a72c3fc723095951e29eda8bdf76163386581f49f67", 0xc5}], 0x4, &(0x7f000000f800)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee00}}}], 0x20, 0x40000}, 0x8001) 2.315332255s ago: executing program 1 (id=2191): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x9, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x7fff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff, 0x2}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x800, 0x2, 0x7ff, 0x1000000000000000, 0x9, 0x9]}, &(0x7f00000000c0)=0x78) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40901}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x6}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x4800) 2.088251856s ago: executing program 4 (id=2192): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x142, 0x0) 1.996657141s ago: executing program 4 (id=2193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 1.930066276s ago: executing program 3 (id=2194): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0, 0x124}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 1.875263813s ago: executing program 4 (id=2195): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x420, 0x240, 0x240, 0x420, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x16, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x100000, 0x1ff, 0x100000, 0x0, 0xed, 0x7}, {0x4}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x7}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x2, 0x4}, 0x0, 0x260, 0x2c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x7fff, 0x5, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x4e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0xdd}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1001, 0x6, 0x3, 0x0, 0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x80000001, r4, 0x4}, 0x38) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7, 0x1, 0xe, 0x5, {{0xe, 0x4, 0x0, 0x8, 0x38, 0x68, 0x0, 0xf, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0x5f, [@local, @multicast2, @remote, @broadcast, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x3c, [@loopback, @loopback]}]}}}}}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x11, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x200}, [@jmp={0x5, 0x1, 0x5, 0xb, 0x8, 0x18, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call, @generic={0x73, 0x0, 0x7, 0x3, 0x80000001}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='syzkaller\x00', 0x6, 0x24, &(0x7f0000000780)=""/36, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xc, 0x4, 0x20}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0xffffffffffffffff, r3], &(0x7f0000000880)=[{0x3, 0x1, 0x4, 0x9}, {0x4, 0x5, 0x1}, {0x0, 0x1, 0xe, 0x3}], 0x10, 0x7}, 0x94) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r12, 0x0) (async) getsockopt$netlink(r12, 0x10e, 0x1, &(0x7f0000000ac0)=""/143, &(0x7f0000000140)=0x8f) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0xb, &(0x7f00000001c0)=@raw=[@alu={0x7, 0x0, 0x0, 0x6, 0x9, 0xfffffffffffffff8, 0x10}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, r7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}], &(0x7f0000000340)='syzkaller\x00', 0xd4, 0x69, &(0x7f0000000400)=""/105, 0x41100, 0x4, '\x00', r9, 0x19, r10, 0x8, &(0x7f0000000640)={0x9, 0xa98}, 0x8, 0x10, 0x0, 0x0, 0xfe3f, r11, 0x3, &(0x7f0000000980)=[r12], &(0x7f00000009c0)=[{0x4, 0x5, 0x9, 0x6}, {0x3, 0x3, 0x2, 0xb}, {0x1, 0x3, 0xe, 0x9}], 0x10, 0x600000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r13, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x81, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000000080)='GPL\x00'}, 0x90) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.460022317s ago: executing program 3 (id=2196): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 592.037047ms ago: executing program 3 (id=2197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 475.740516ms ago: executing program 3 (id=2198): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 55.562784ms ago: executing program 3 (id=2199): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 0s ago: executing program 4 (id=2200): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0xd, 0x1000, 0x4a}, 0x2c) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.161987][ T9510] RSP: 002b:00007fe1115bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.162007][ T9510] RAX: ffffffffffffffda RBX: 00007fe1109b5fa0 RCX: 00007fe11078e929 [ 196.162021][ T9510] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 196.162033][ T9510] RBP: 00007fe1115bb090 R08: 0000000000000000 R09: 0000000000000000 [ 196.162053][ T9510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.162064][ T9510] R13: 0000000000000000 R14: 00007fe1109b5fa0 R15: 00007ffcb9b06638 [ 196.162094][ T9510] [ 197.130984][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 197.166355][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 197.188761][ T9546] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 197.332910][ T9546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.503114][ T9553] bond1: (slave gretap1): making interface the new active one [ 197.528556][ T9553] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 197.692532][ T9560] bond1 (unregistering): (slave gretap1): Releasing active interface [ 197.710439][ T9560] bond1 (unregistering): Released all slaves [ 197.725146][ T9573] netlink: 'syz.1.1155': attribute type 10 has an invalid length. [ 199.302977][ T9641] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20003 [ 199.713055][ T9654] vlan2: entered promiscuous mode [ 199.751675][ T9656] syzkaller1: entered promiscuous mode [ 199.768402][ T9656] syzkaller1: entered allmulticast mode [ 199.841004][ T9658] __nla_validate_parse: 3 callbacks suppressed [ 199.841023][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1187'. [ 199.921276][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 199.961648][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 200.006649][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1188'. [ 200.229618][ T9682] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20003 [ 200.259161][ T9677] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1192'. [ 200.805334][ T9709] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1201'. [ 201.973880][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1214'. [ 202.279455][ T5936] hid-generic 0005:0C45:0004.0005: item fetching failed at offset 0/1 [ 202.328103][ T5936] hid-generic 0005:0C45:0004.0005: probe with driver hid-generic failed with error -22 [ 202.532752][ T9773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.707208][ T9773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.933059][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 203.026735][ T9773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.249248][ T9773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.365536][ T9803] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 203.474871][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1230'. [ 203.489094][ T9808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.514150][ T9808] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1230'. [ 203.539204][ T3495] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.599432][ T6774] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.662401][ T6777] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.725443][ T6777] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.509837][ T9848] pim6reg1: entered allmulticast mode [ 205.260809][ T9882] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 205.377660][ T9901] __nla_validate_parse: 10 callbacks suppressed [ 205.377680][ T9901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1259'. [ 205.420785][ T9901] FAULT_INJECTION: forcing a failure. [ 205.420785][ T9901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.469538][ T9901] CPU: 1 UID: 0 PID: 9901 Comm: syz.4.1259 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 205.469567][ T9901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.469580][ T9901] Call Trace: [ 205.469587][ T9901] [ 205.469596][ T9901] dump_stack_lvl+0x189/0x250 [ 205.469635][ T9901] ? __pfx____ratelimit+0x10/0x10 [ 205.469659][ T9901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.469691][ T9901] ? __pfx__printk+0x10/0x10 [ 205.469726][ T9901] should_fail_ex+0x414/0x560 [ 205.469758][ T9901] _copy_to_user+0x31/0xb0 [ 205.469781][ T9901] simple_read_from_buffer+0xe1/0x170 [ 205.469807][ T9901] proc_fail_nth_read+0x1df/0x250 [ 205.469836][ T9901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.469863][ T9901] ? rw_verify_area+0x258/0x650 [ 205.469894][ T9901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 205.469920][ T9901] vfs_read+0x1fd/0x980 [ 205.469957][ T9901] ? __pfx___mutex_lock+0x10/0x10 [ 205.470001][ T9901] ? __pfx_vfs_read+0x10/0x10 [ 205.470035][ T9901] ? __fget_files+0x2a/0x420 [ 205.470063][ T9901] ? __fget_files+0x3a0/0x420 [ 205.470084][ T9901] ? __fget_files+0x2a/0x420 [ 205.470119][ T9901] ksys_read+0x145/0x250 [ 205.470162][ T9901] ? __pfx_ksys_read+0x10/0x10 [ 205.470191][ T9901] ? rcu_is_watching+0x15/0xb0 [ 205.470230][ T9901] ? do_syscall_64+0xbe/0x3b0 [ 205.470260][ T9901] do_syscall_64+0xfa/0x3b0 [ 205.470283][ T9901] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.470305][ T9901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.470326][ T9901] ? clear_bhb_loop+0x60/0xb0 [ 205.470351][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.470371][ T9901] RIP: 0033:0x7fe11078d33c [ 205.470391][ T9901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 205.470409][ T9901] RSP: 002b:00007fe1115bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 205.470431][ T9901] RAX: ffffffffffffffda RBX: 00007fe1109b5fa0 RCX: 00007fe11078d33c [ 205.470445][ T9901] RDX: 000000000000000f RSI: 00007fe1115bb0a0 RDI: 0000000000000004 [ 205.470458][ T9901] RBP: 00007fe1115bb090 R08: 0000000000000000 R09: 0000000000000000 [ 205.470470][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.470482][ T9901] R13: 0000000000000000 R14: 00007fe1109b5fa0 R15: 00007ffcb9b06638 [ 205.470513][ T9901] [ 205.838021][ T9909] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 206.000334][ T9917] FAULT_INJECTION: forcing a failure. [ 206.000334][ T9917] name failslab, interval 1, probability 0, space 0, times 0 [ 206.043679][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.0.1265 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 206.043709][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.043721][ T9917] Call Trace: [ 206.043730][ T9917] [ 206.043738][ T9917] dump_stack_lvl+0x189/0x250 [ 206.043775][ T9917] ? __pfx____ratelimit+0x10/0x10 [ 206.043799][ T9917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.043831][ T9917] ? __pfx__printk+0x10/0x10 [ 206.043856][ T9917] ? __pfx___might_resched+0x10/0x10 [ 206.043887][ T9917] ? fs_reclaim_acquire+0x7d/0x100 [ 206.043916][ T9917] should_fail_ex+0x414/0x560 [ 206.043947][ T9917] should_failslab+0xa8/0x100 [ 206.043971][ T9917] kmem_cache_alloc_noprof+0x73/0x3c0 [ 206.044002][ T9917] ? ep_ptable_queue_proc+0x5c/0x200 [ 206.044029][ T9917] ep_ptable_queue_proc+0x5c/0x200 [ 206.044050][ T9917] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 206.044072][ T9917] datagram_poll+0x82/0x420 [ 206.044095][ T9917] sock_poll+0x32c/0x3e0 [ 206.044121][ T9917] ? __pfx_sock_poll+0x10/0x10 [ 206.044139][ T9917] ep_insert+0x115e/0x1a00 [ 206.044189][ T9917] ? __pfx_ep_insert+0x10/0x10 [ 206.044220][ T9917] ? __pfx___mutex_lock+0x10/0x10 [ 206.044245][ T9917] ? __fget_files+0x2a/0x420 [ 206.044270][ T9917] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 206.044290][ T9917] ? __fget_files+0x3a0/0x420 [ 206.044311][ T9917] ? __fget_files+0x2a/0x420 [ 206.044343][ T9917] do_epoll_ctl+0x7f4/0xe90 [ 206.044384][ T9917] __x64_sys_epoll_ctl+0x163/0x1a0 [ 206.044426][ T9917] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 206.044456][ T9917] ? rcu_is_watching+0x15/0xb0 [ 206.044493][ T9917] ? do_syscall_64+0xbe/0x3b0 [ 206.044521][ T9917] do_syscall_64+0xfa/0x3b0 [ 206.044543][ T9917] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.044565][ T9917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.044585][ T9917] ? clear_bhb_loop+0x60/0xb0 [ 206.044610][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.044630][ T9917] RIP: 0033:0x7f748e38e929 [ 206.044648][ T9917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.044664][ T9917] RSP: 002b:00007f748c1b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 206.044686][ T9917] RAX: ffffffffffffffda RBX: 00007f748e5b6160 RCX: 00007f748e38e929 [ 206.044701][ T9917] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 206.044712][ T9917] RBP: 00007f748c1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 206.044724][ T9917] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 206.044737][ T9917] R13: 0000000000000000 R14: 00007f748e5b6160 R15: 00007ffc95a947e8 [ 206.044769][ T9917] [ 206.433434][ T9927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 37430 - 0 [ 206.480363][ T9927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 206.560578][ T9925] wireguard0: entered promiscuous mode [ 206.570516][ T9925] wireguard0: entered allmulticast mode [ 206.642844][ T9927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 37430 - 0 [ 206.669643][ T9927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 206.831371][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1273'. [ 206.863344][ T9927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 37430 - 0 [ 206.901861][ T9927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 206.950139][ T9948] netlink: 'syz.1.1274': attribute type 10 has an invalid length. [ 207.083303][ T9927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 37430 - 0 [ 207.136129][ T9927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 207.161473][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 207.209326][ T9955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1278'. [ 207.209981][ T9959] netlink: 'syz.2.1276': attribute type 10 has an invalid length. [ 207.219060][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 207.239858][ T9955] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1278'. [ 207.290739][ T9955] netlink: 'syz.0.1278': attribute type 3 has an invalid length. [ 207.336619][ T6774] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.351861][ T6774] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 37430 - 0 [ 207.357807][ T9955] netlink: 'syz.0.1278': attribute type 2 has an invalid length. [ 207.427525][ T9955] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1278'. [ 207.450081][ T6777] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.464806][ T6777] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 37430 - 0 [ 207.679811][ T2134] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.720859][ T2134] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 37430 - 0 [ 207.743819][ T2134] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.763526][ T2134] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 37430 - 0 [ 208.098118][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1287'. [ 208.340726][ T9995] netlink: 'syz.2.1292': attribute type 3 has an invalid length. [ 208.365187][ T9995] netlink: 191640 bytes leftover after parsing attributes in process `syz.2.1292'. [ 208.726241][T10010] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.919436][T10010] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.074288][T10010] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.097776][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1299'. [ 209.215339][T10010] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.525505][ T3495] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.553104][ T3495] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.755739][ T3495] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.786605][ T3495] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.889829][T10081] __nla_validate_parse: 3 callbacks suppressed [ 210.889849][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1320'. [ 210.937461][T10082] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 210.950530][T10081] veth7: entered promiscuous mode [ 211.130457][T10091] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1322'. [ 211.155312][T10091] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1322'. [ 211.309456][T10097] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20003 [ 211.342514][T10101] netem: change failed [ 211.407792][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 211.618940][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 211.625013][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 211.633297][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 212.070526][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1335'. [ 212.301718][T10142] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20003 [ 212.321099][T10135] veth5: entered promiscuous mode [ 213.111753][T10182] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1351'. [ 213.163889][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 213.195729][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 213.252315][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 213.280825][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 213.402790][T10199] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.701151][T10249] vlan2: entered promiscuous mode [ 214.755367][T10249] vlan2: entered allmulticast mode [ 214.777966][T10257] FAULT_INJECTION: forcing a failure. [ 214.777966][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 214.789180][T10249] hsr_slave_1: entered allmulticast mode [ 214.808680][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.1.1376 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 214.808718][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.808731][T10257] Call Trace: [ 214.808740][T10257] [ 214.808749][T10257] dump_stack_lvl+0x189/0x250 [ 214.808787][T10257] ? __pfx____ratelimit+0x10/0x10 [ 214.808812][T10257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.808845][T10257] ? __pfx__printk+0x10/0x10 [ 214.808876][T10257] ? __pfx___might_resched+0x10/0x10 [ 214.808906][T10257] ? fs_reclaim_acquire+0x7d/0x100 [ 214.808937][T10257] should_fail_ex+0x414/0x560 [ 214.808969][T10257] should_failslab+0xa8/0x100 [ 214.808994][T10257] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 214.809016][T10257] ? __kthread_create_on_node+0x1c6/0x3e0 [ 214.809045][T10257] kvasprintf+0xdc/0x190 [ 214.809069][T10257] ? __pfx_kvasprintf+0x10/0x10 [ 214.809091][T10257] ? __kasan_kmalloc+0x93/0xb0 [ 214.809114][T10257] ? __kthread_create_on_node+0xef/0x3e0 [ 214.809142][T10257] __kthread_create_on_node+0x1c6/0x3e0 [ 214.809167][T10257] ? __pfx___kthread_create_on_node+0x10/0x10 [ 214.809205][T10257] ? __pfx_hidp_session_thread+0x10/0x10 [ 214.809228][T10257] ? __pfx_hidp_session_thread+0x10/0x10 [ 214.809251][T10257] kthread_create_on_node+0xdd/0x130 [ 214.809280][T10257] ? __pfx_kthread_create_on_node+0x10/0x10 [ 214.809300][T10257] ? down_write+0x162/0x1f0 [ 214.809329][T10257] ? __mutex_lock+0x330/0xe80 [ 214.809365][T10257] hidp_session_probe+0x2e2/0x890 [ 214.809394][T10257] ? __pfx_hidp_session_probe+0x10/0x10 [ 214.809413][T10257] ? snprintf+0xda/0x120 [ 214.809451][T10257] ? hid_match_id+0x313/0x340 [ 214.809484][T10257] l2cap_register_user+0xf4/0x200 [ 214.809505][T10257] ? hidp_connection_add+0x1575/0x1a50 [ 214.809530][T10257] hidp_connection_add+0x1599/0x1a50 [ 214.809566][T10257] hidp_sock_ioctl+0x36c/0x560 [ 214.809594][T10257] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 214.809671][T10257] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 214.809705][T10257] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.809743][T10257] sock_do_ioctl+0xd9/0x300 [ 214.809770][T10257] ? __pfx_sock_do_ioctl+0x10/0x10 [ 214.809789][T10257] ? __lock_acquire+0xab9/0xd20 [ 214.809840][T10257] sock_ioctl+0x576/0x790 [ 214.809864][T10257] ? __pfx_sock_ioctl+0x10/0x10 [ 214.809887][T10257] ? __fget_files+0x2a/0x420 [ 214.809910][T10257] ? __fget_files+0x3a0/0x420 [ 214.809933][T10257] ? __fget_files+0x2a/0x420 [ 214.809960][T10257] ? bpf_lsm_file_ioctl+0x9/0x20 [ 214.809991][T10257] ? __pfx_sock_ioctl+0x10/0x10 [ 214.810013][T10257] __se_sys_ioctl+0xfc/0x170 [ 214.810048][T10257] do_syscall_64+0xfa/0x3b0 [ 214.810072][T10257] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.810095][T10257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.810117][T10257] ? clear_bhb_loop+0x60/0xb0 [ 214.810144][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.810165][T10257] RIP: 0033:0x7fd48e78e929 [ 214.810185][T10257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.810203][T10257] RSP: 002b:00007fd48f5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.810226][T10257] RAX: ffffffffffffffda RBX: 00007fd48e9b5fa0 RCX: 00007fd48e78e929 [ 214.810241][T10257] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000005 [ 214.810256][T10257] RBP: 00007fd48f5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 214.810270][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.810283][T10257] R13: 0000000000000000 R14: 00007fd48e9b5fa0 R15: 00007ffc71c272c8 [ 214.810318][T10257] [ 215.524933][T10277] netlink: 'syz.0.1380': attribute type 142 has an invalid length. [ 215.607670][T10280] veth3: entered promiscuous mode [ 216.237890][T10311] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.390849][T10311] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.576361][T10311] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.595282][ T6770] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.620145][ T6770] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.636603][T10328] netlink: 'syz.3.1397': attribute type 10 has an invalid length. [ 216.658695][ T6770] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.679803][ T6770] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.708622][T10311] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.898989][T10339] __nla_validate_parse: 5 callbacks suppressed [ 216.899008][T10339] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1400'. [ 216.942908][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1401'. [ 217.144852][T10344] veth5: entered promiscuous mode [ 217.320857][ T6772] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.399638][ T6768] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.519445][T10362] bond0: entered promiscuous mode [ 217.524538][T10362] bond_slave_0: entered promiscuous mode [ 217.569844][T10362] bond_slave_1: entered promiscuous mode [ 217.582047][T10362] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.640223][T10362] bond0: left promiscuous mode [ 217.645378][T10362] bond_slave_0: left promiscuous mode [ 217.698275][T10362] bond_slave_1: left promiscuous mode [ 217.774989][ T6772] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.814756][T10377] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1415'. [ 217.826293][ T6770] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.352761][T10404] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1419'. [ 218.885219][T10430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1431'. [ 219.131507][T10438] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1434'. [ 219.351490][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1436'. [ 219.399211][T10458] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1438'. [ 219.417675][T10459] netlink: 'syz.1.1440': attribute type 10 has an invalid length. [ 219.679620][ T44] hid-generic 0005:0C45:0004.0006: item fetching failed at offset 0/1 [ 219.702411][T10465] FAULT_INJECTION: forcing a failure. [ 219.702411][T10465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.716530][ T44] hid-generic 0005:0C45:0004.0006: probe with driver hid-generic failed with error -22 [ 219.725830][T10465] CPU: 0 UID: 0 PID: 10465 Comm: syz.2.1442 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 219.725865][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.725881][T10465] Call Trace: [ 219.725890][T10465] [ 219.725900][T10465] dump_stack_lvl+0x189/0x250 [ 219.725946][T10465] ? __pfx____ratelimit+0x10/0x10 [ 219.725974][T10465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.726012][T10465] ? __pfx__printk+0x10/0x10 [ 219.726055][T10465] should_fail_ex+0x414/0x560 [ 219.726091][T10465] _copy_to_user+0x31/0xb0 [ 219.726117][T10465] hidp_sock_ioctl+0x45c/0x560 [ 219.726148][T10465] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 219.726221][T10465] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 219.726247][T10465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.726282][T10465] sock_do_ioctl+0xd9/0x300 [ 219.726307][T10465] ? __pfx_sock_do_ioctl+0x10/0x10 [ 219.726325][T10465] ? __lock_acquire+0xab9/0xd20 [ 219.726384][T10465] sock_ioctl+0x576/0x790 [ 219.726407][T10465] ? __pfx_sock_ioctl+0x10/0x10 [ 219.726432][T10465] ? __fget_files+0x2a/0x420 [ 219.726458][T10465] ? __fget_files+0x3a0/0x420 [ 219.726483][T10465] ? __fget_files+0x2a/0x420 [ 219.726519][T10465] ? bpf_lsm_file_ioctl+0x9/0x20 [ 219.726552][T10465] ? __pfx_sock_ioctl+0x10/0x10 [ 219.726576][T10465] __se_sys_ioctl+0xfc/0x170 [ 219.726615][T10465] do_syscall_64+0xfa/0x3b0 [ 219.726642][T10465] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.726668][T10465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.726690][T10465] ? clear_bhb_loop+0x60/0xb0 [ 219.726721][T10465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.726744][T10465] RIP: 0033:0x7f3d8c18e929 [ 219.726764][T10465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.726785][T10465] RSP: 002b:00007f3d8cff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.726809][T10465] RAX: ffffffffffffffda RBX: 00007f3d8c3b5fa0 RCX: 00007f3d8c18e929 [ 219.726827][T10465] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000005 [ 219.726843][T10465] RBP: 00007f3d8cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.726858][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.726871][T10465] R13: 0000000000000000 R14: 00007f3d8c3b5fa0 R15: 00007ffc48c89278 [ 219.726908][T10465] [ 220.203259][T10482] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1447'. [ 220.470085][T10495] FAULT_INJECTION: forcing a failure. [ 220.470085][T10495] name failslab, interval 1, probability 0, space 0, times 0 [ 220.509631][T10494] tipc: Started in network mode [ 220.520706][T10495] CPU: 0 UID: 0 PID: 10495 Comm: syz.1.1455 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 220.520737][T10495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.520750][T10495] Call Trace: [ 220.520759][T10495] [ 220.520769][T10495] dump_stack_lvl+0x189/0x250 [ 220.520807][T10495] ? __pfx____ratelimit+0x10/0x10 [ 220.520832][T10495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.520865][T10495] ? __pfx__printk+0x10/0x10 [ 220.520892][T10495] ? __pfx___might_resched+0x10/0x10 [ 220.520925][T10495] ? fs_reclaim_acquire+0x7d/0x100 [ 220.520956][T10495] should_fail_ex+0x414/0x560 [ 220.520988][T10495] should_failslab+0xa8/0x100 [ 220.521012][T10495] __kmalloc_noprof+0xcb/0x4f0 [ 220.521031][T10495] ? tomoyo_encode+0x28b/0x550 [ 220.521066][T10495] tomoyo_encode+0x28b/0x550 [ 220.521102][T10495] tomoyo_realpath_from_path+0x58d/0x5d0 [ 220.521134][T10495] ? tomoyo_domain+0xd9/0x130 [ 220.521170][T10495] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 220.521195][T10495] tomoyo_path_number_perm+0x1e8/0x5a0 [ 220.521222][T10495] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.521267][T10495] ? __lock_acquire+0xab9/0xd20 [ 220.521326][T10495] ? __fget_files+0x2a/0x420 [ 220.521354][T10495] ? __fget_files+0x2a/0x420 [ 220.521375][T10495] ? __fget_files+0x3a0/0x420 [ 220.521396][T10495] ? __fget_files+0x2a/0x420 [ 220.521424][T10495] security_file_ioctl+0xcb/0x2d0 [ 220.521449][T10495] __se_sys_ioctl+0x47/0x170 [ 220.521483][T10495] do_syscall_64+0xfa/0x3b0 [ 220.521507][T10495] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.521530][T10495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.521551][T10495] ? clear_bhb_loop+0x60/0xb0 [ 220.521578][T10495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.521598][T10495] RIP: 0033:0x7fd48e78e929 [ 220.521617][T10495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.521635][T10495] RSP: 002b:00007fd48f5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.521657][T10495] RAX: ffffffffffffffda RBX: 00007fd48e9b5fa0 RCX: 00007fd48e78e929 [ 220.521673][T10495] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 220.521686][T10495] RBP: 00007fd48f5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 220.521699][T10495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.521712][T10495] R13: 0000000000000000 R14: 00007fd48e9b5fa0 R15: 00007ffc71c272c8 [ 220.521751][T10495] [ 220.521842][T10495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.524892][T10494] tipc: Node identity 2e94db0b1bc5, cluster identity 4711 [ 220.680962][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 220.754392][T10494] tipc: Enabled bearer , priority 0 [ 220.995565][T10492] tipc: Disabling bearer [ 221.151988][T10524] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.335554][T10524] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.496245][T10524] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.632269][T10547] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 221.716581][T10524] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.972793][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1474'. [ 222.011142][ T6777] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.025033][T10569] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1475'. [ 222.088406][ T2134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.134610][T10573] veth3: entered promiscuous mode [ 222.175324][ T6774] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.210814][ T6774] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.331666][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 222.384893][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1478'. [ 222.414968][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 222.450916][T10579] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1478'. [ 222.460630][T10587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 222.526490][T10579] netlink: 'syz.0.1478': attribute type 3 has an invalid length. [ 222.585404][T10579] netlink: 'syz.0.1478': attribute type 2 has an invalid length. [ 222.628267][T10579] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1478'. [ 223.026384][T10607] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 223.314266][T10614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1489'. [ 223.629273][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 223.656667][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 224.065787][T10647] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 224.083557][T10647] netlink: 'syz.0.1499': attribute type 1 has an invalid length. [ 224.152005][T10647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.509280][T10658] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.657531][T10658] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.808167][T10658] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.967362][T10658] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.204797][ T6777] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.220684][ T6777] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.340186][T10717] veth5: entered promiscuous mode [ 226.371544][ T6772] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.446468][ T6770] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.590157][T10719] veth3: entered promiscuous mode [ 226.962592][T10742] netlink: 'syz.0.1533': attribute type 13 has an invalid length. [ 227.002402][T10742] netlink: 'syz.0.1533': attribute type 17 has an invalid length. [ 227.017521][T10744] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 227.165571][T10742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.171633][T10581] Set syz1 is full, maxelem 65536 reached [ 227.291461][T10582] Set syz1 is full, maxelem 65536 reached [ 227.580928][T10760] netlink: 'syz.1.1540': attribute type 1 has an invalid length. [ 227.626302][T10760] netlink: 'syz.1.1540': attribute type 3 has an invalid length. [ 227.634075][T10760] netlink: 'syz.1.1540': attribute type 3 has an invalid length. [ 227.680413][T10760] __nla_validate_parse: 10 callbacks suppressed [ 227.680431][T10760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1540'. [ 227.701972][T10764] netlink: 'syz.3.1542': attribute type 39 has an invalid length. [ 227.746468][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 227.762722][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 227.773800][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 227.810827][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 227.852372][T10767] bridge1: port 1(ip6gretap1) entered blocking state [ 227.866437][T10767] bridge1: port 1(ip6gretap1) entered disabled state [ 227.878524][T10767] ip6gretap1: entered allmulticast mode [ 227.884287][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 227.884312][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 227.954592][T10767] ip6gretap1: entered promiscuous mode [ 228.026483][T10772] veth5: entered promiscuous mode [ 228.035297][T10772] bridge1: port 2(veth5) entered blocking state [ 228.059973][T10772] bridge1: port 2(veth5) entered disabled state [ 228.075209][T10772] veth5: entered allmulticast mode [ 228.091539][T10775] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 228.115367][T10784] FAULT_INJECTION: forcing a failure. [ 228.115367][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 228.139905][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.1.1548 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 228.139934][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.139948][T10784] Call Trace: [ 228.139957][T10784] [ 228.139966][T10784] dump_stack_lvl+0x189/0x250 [ 228.140010][T10784] ? __pfx____ratelimit+0x10/0x10 [ 228.140035][T10784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.140068][T10784] ? __pfx__printk+0x10/0x10 [ 228.140098][T10784] ? __pfx___might_resched+0x10/0x10 [ 228.140130][T10784] ? fs_reclaim_acquire+0x7d/0x100 [ 228.140162][T10784] should_fail_ex+0x414/0x560 [ 228.140194][T10784] should_failslab+0xa8/0x100 [ 228.140220][T10784] __kmalloc_noprof+0xcb/0x4f0 [ 228.140240][T10784] ? ioctl_standard_iw_point+0x4d5/0xd40 [ 228.140275][T10784] ioctl_standard_iw_point+0x4d5/0xd40 [ 228.140321][T10784] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 228.140346][T10784] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 228.140376][T10784] ? __pfx___mutex_lock+0x10/0x10 [ 228.140409][T10784] ? full_name_hash+0x92/0xe0 [ 228.140436][T10784] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 228.140459][T10784] ioctl_standard_call+0xaf/0x1b0 [ 228.140491][T10784] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 228.140520][T10784] wext_ioctl_dispatch+0xeb/0x410 [ 228.140545][T10784] ? __pfx_ioctl_standard_call+0x10/0x10 [ 228.140577][T10784] wext_handle_ioctl+0x100/0x1c0 [ 228.140609][T10784] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 228.140634][T10784] ? __lock_acquire+0xab9/0xd20 [ 228.140683][T10784] sock_ioctl+0x15f/0x790 [ 228.140707][T10784] ? __pfx_sock_ioctl+0x10/0x10 [ 228.140728][T10784] ? __fget_files+0x2a/0x420 [ 228.140751][T10784] ? __fget_files+0x3a0/0x420 [ 228.140773][T10784] ? __fget_files+0x2a/0x420 [ 228.140800][T10784] ? bpf_lsm_file_ioctl+0x9/0x20 [ 228.140831][T10784] ? __pfx_sock_ioctl+0x10/0x10 [ 228.140851][T10784] __se_sys_ioctl+0xfc/0x170 [ 228.140886][T10784] do_syscall_64+0xfa/0x3b0 [ 228.140909][T10784] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.140933][T10784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.140954][T10784] ? clear_bhb_loop+0x60/0xb0 [ 228.140981][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.141001][T10784] RIP: 0033:0x7fd48e78e929 [ 228.141020][T10784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.141039][T10784] RSP: 002b:00007fd48f5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.141062][T10784] RAX: ffffffffffffffda RBX: 00007fd48e9b5fa0 RCX: 00007fd48e78e929 [ 228.141079][T10784] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 228.141093][T10784] RBP: 00007fd48f5f8090 R08: 0000000000000000 R09: 0000000000000000 [ 228.141105][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.141118][T10784] R13: 0000000000000000 R14: 00007fd48e9b5fa0 R15: 00007ffc71c272c8 [ 228.141153][T10784] [ 228.792977][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 228.887828][T10803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1558'. [ 228.908297][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 228.923177][T10803] netlink: 'syz.0.1558': attribute type 3 has an invalid length. [ 228.938348][T10803] netlink: 'syz.0.1558': attribute type 2 has an invalid length. [ 229.213707][T10820] FAULT_INJECTION: forcing a failure. [ 229.213707][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 229.238617][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.4.1565 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 229.238651][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 229.238665][T10820] Call Trace: [ 229.238673][T10820] [ 229.238682][T10820] dump_stack_lvl+0x189/0x250 [ 229.238729][T10820] ? __pfx____ratelimit+0x10/0x10 [ 229.238755][T10820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.238789][T10820] ? __pfx__printk+0x10/0x10 [ 229.238827][T10820] ? __pfx___might_resched+0x10/0x10 [ 229.238865][T10820] should_fail_ex+0x414/0x560 [ 229.238898][T10820] should_failslab+0xa8/0x100 [ 229.238922][T10820] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 229.238958][T10820] ? __alloc_skb+0x112/0x2d0 [ 229.238991][T10820] __alloc_skb+0x112/0x2d0 [ 229.239024][T10820] netlink_sendmsg+0x5c6/0xb30 [ 229.239061][T10820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.239092][T10820] ? aa_sock_msg_perm+0x94/0x160 [ 229.239121][T10820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 229.239148][T10820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.239175][T10820] __sock_sendmsg+0x219/0x270 [ 229.239202][T10820] ____sys_sendmsg+0x505/0x830 [ 229.239239][T10820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.239280][T10820] ? import_iovec+0x74/0xa0 [ 229.239304][T10820] ___sys_sendmsg+0x21f/0x2a0 [ 229.239336][T10820] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.239406][T10820] ? __fget_files+0x2a/0x420 [ 229.239428][T10820] ? __fget_files+0x3a0/0x420 [ 229.239460][T10820] __x64_sys_sendmsg+0x19b/0x260 [ 229.239494][T10820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.239535][T10820] ? __pfx_ksys_write+0x10/0x10 [ 229.239564][T10820] ? rcu_is_watching+0x15/0xb0 [ 229.239606][T10820] ? do_syscall_64+0xbe/0x3b0 [ 229.239636][T10820] do_syscall_64+0xfa/0x3b0 [ 229.239661][T10820] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.239684][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.239715][T10820] ? clear_bhb_loop+0x60/0xb0 [ 229.239741][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.239762][T10820] RIP: 0033:0x7fe11078e929 [ 229.239781][T10820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.239799][T10820] RSP: 002b:00007fe1115bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.239822][T10820] RAX: ffffffffffffffda RBX: 00007fe1109b5fa0 RCX: 00007fe11078e929 [ 229.239838][T10820] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 229.239852][T10820] RBP: 00007fe1115bb090 R08: 0000000000000000 R09: 0000000000000000 [ 229.239865][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.239877][T10820] R13: 0000000000000000 R14: 00007fe1109b5fa0 R15: 00007ffcb9b06638 [ 229.239910][T10820] [ 229.272713][T10824] $Hÿ: renamed from bond0 (while UP) [ 229.587471][T10824] $Hÿ: entered promiscuous mode [ 229.611367][T10833] netlink: 'syz.3.1567': attribute type 1 has an invalid length. [ 229.617377][T10824] bond_slave_0: entered promiscuous mode [ 229.643811][T10824] bond_slave_1: entered promiscuous mode [ 229.669226][T10824] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 229.702434][T10830] bond0: entered promiscuous mode [ 229.707692][T10830] bond_slave_0: entered promiscuous mode [ 229.715899][T10830] bond_slave_1: entered promiscuous mode [ 229.743088][T10830] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.848580][T10830] bond0: left promiscuous mode [ 229.853531][T10830] bond_slave_0: left promiscuous mode [ 229.870520][T10830] bond_slave_1: left promiscuous mode [ 229.974911][T10847] vlan3: entered promiscuous mode [ 229.991189][T10847] erspan0: entered promiscuous mode [ 230.015442][T10846] vlan2: entered promiscuous mode [ 230.264252][T10859] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.341190][T10859] Bluetooth: MGMT ver 1.23 [ 230.433604][T10872] lo: entered promiscuous mode [ 230.461194][T10872] tunl0: entered promiscuous mode [ 230.506305][T10872] gre0: entered promiscuous mode [ 230.592326][T10872] gretap0: entered promiscuous mode [ 230.621721][T10878] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.653932][T10872] ip_vti0: entered promiscuous mode [ 230.668641][T10872] ip6_vti0: entered promiscuous mode [ 230.686263][T10878] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 230.696677][T10872] sit0: entered promiscuous mode [ 230.756792][T10872] ip6tnl0: entered promiscuous mode [ 230.768976][T10872] ip6gre0: entered promiscuous mode [ 230.789648][T10872] syz_tun: entered promiscuous mode [ 230.798113][T10872] ip6gretap0: entered promiscuous mode [ 230.807328][T10872] bridge0: entered promiscuous mode [ 230.813891][T10872] vcan0: entered promiscuous mode [ 230.826900][T10872] nlmon0: entered promiscuous mode [ 230.834085][T10872] caif0: entered promiscuous mode [ 230.843223][T10872] vxcan0: entered promiscuous mode [ 230.849263][T10872] vxcan1: entered promiscuous mode [ 230.854955][T10872] wg0: entered promiscuous mode [ 230.862226][T10872] wg1: entered promiscuous mode [ 230.867613][T10872] wg2: entered promiscuous mode [ 230.873019][T10872] veth0_to_bridge: entered promiscuous mode [ 230.880265][T10872] bridge_slave_0: left allmulticast mode [ 230.888817][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.899089][T10872] veth1_to_bridge: entered promiscuous mode [ 230.905381][T10872] bridge_slave_1: left allmulticast mode [ 230.912049][T10872] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.922219][T10872] veth0_to_bond: entered promiscuous mode [ 230.929895][T10872] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 230.939454][T10872] veth1_to_bond: entered promiscuous mode [ 230.947183][T10872] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 230.956592][T10872] veth0_to_team: entered promiscuous mode [ 230.962902][T10872] team_slave_0: left allmulticast mode [ 230.971190][T10872] team0: Port device team_slave_0 removed [ 230.979262][T10872] veth1_to_team: entered promiscuous mode [ 230.987679][T10872] team_slave_1: left allmulticast mode [ 230.994351][T10872] team0: Port device team_slave_1 removed [ 231.002162][T10872] veth0_to_batadv: entered promiscuous mode [ 231.010173][T10872] batadv_slave_0: entered promiscuous mode [ 231.016633][T10872] veth1_to_batadv: entered promiscuous mode [ 231.022792][T10872] batadv_slave_1: entered promiscuous mode [ 231.029843][T10872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.039068][T10872] xfrm0: entered promiscuous mode [ 231.044391][T10872] veth0_to_hsr: entered promiscuous mode [ 231.050929][T10872] veth1_to_hsr: entered promiscuous mode [ 231.058120][T10872] hsr0: entered promiscuous mode [ 231.063308][T10872] veth1_virt_wifi: entered promiscuous mode [ 231.069745][T10872] veth0_virt_wifi: entered promiscuous mode [ 231.076172][T10872] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 231.083762][T10872] vlan0: entered promiscuous mode [ 231.090060][T10872] vlan1: entered promiscuous mode [ 231.095578][T10872] macvlan0: entered promiscuous mode [ 231.101448][T10872] macvlan1: entered promiscuous mode [ 231.107460][T10872] ipvlan0: entered promiscuous mode [ 231.112944][T10872] ipvlan1: entered promiscuous mode [ 231.119141][T10872] veth1_macvtap: entered promiscuous mode [ 231.125208][T10872] macvtap0: entered promiscuous mode [ 231.130857][T10872] geneve0: entered promiscuous mode [ 231.137005][T10872] geneve1: entered promiscuous mode [ 231.142480][T10872] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 231.150362][T10872] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 231.158078][T10872] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 231.165800][T10872] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 231.173385][T10872] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 231.182013][T10872] $Hÿ: (slave wlan1): Releasing backup interface [ 231.190281][T10872] erspan1: entered promiscuous mode [ 231.195668][T10872] mac80211_hwsim hwsim19 wlan2: entered promiscuous mode [ 231.203140][T10872] bond1: left allmulticast mode [ 231.209468][T10872] bridge0: port 3(bond1) entered disabled state [ 231.219967][T10872] hsr1: left allmulticast mode [ 231.224777][T10872] dummy0: left allmulticast mode [ 231.230138][T10872] team0: left allmulticast mode [ 231.235171][T10872] bridge0: port 4(hsr1) entered disabled state [ 231.244566][T10872] syztnl2: entered promiscuous mode [ 231.250152][T10872] geneve2: entered promiscuous mode [ 231.255525][T10872] mac80211_hwsim hwsim2 veth1_to_bod: entered promiscuous mode [ 231.264344][T10872] syztnl1: entered promiscuous mode [ 231.270150][T10872] ip6erspan0: entered promiscuous mode [ 231.276914][T10872] gretap1: entered promiscuous mode [ 231.282668][T10872] vlan2: left allmulticast mode [ 231.287751][T10872] hsr_slave_1: left allmulticast mode [ 231.294306][T10872] bond2: entered promiscuous mode [ 231.300683][T10872] macvtap1: entered promiscuous mode [ 231.434354][T10881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.443436][T10881] bond1: (slave bond2): making interface the new active one [ 231.453161][T10881] bond1: (slave bond2): Enslaving as an active interface with an up link [ 231.512030][T10889] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 231.566834][T10891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.139453][T10933] netlink: 'syz.0.1602': attribute type 4 has an invalid length. [ 233.030337][T10951] __nla_validate_parse: 17 callbacks suppressed [ 233.030355][T10951] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1608'. [ 233.374635][T10971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1615'. [ 233.506387][T10971] bridge0: port 1(ip6gretap1) entered blocking state [ 233.543676][T10971] bridge0: port 1(ip6gretap1) entered disabled state [ 233.558198][T10971] ip6gretap1: entered allmulticast mode [ 233.596862][T10971] ip6gretap1: entered promiscuous mode [ 233.650365][T10978] veth3: entered promiscuous mode [ 233.694747][T10978] bridge0: port 2(veth3) entered blocking state [ 233.721932][T10978] bridge0: port 2(veth3) entered disabled state [ 233.738385][T10978] veth3: entered allmulticast mode [ 233.752415][T10982] vlan2: entered promiscuous mode [ 233.967708][T10995] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1624'. [ 234.218417][T11005] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1625'. [ 234.703854][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 234.891316][T11036] netlink: 'syz.0.1632': attribute type 10 has an invalid length. [ 234.961804][T11036] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 234.999460][T11036] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 235.036465][T11036] $Hÿ: (slave wlan1): Enslaving as an active interface with a down link [ 235.208553][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1640'. [ 235.251830][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 235.457901][T11063] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 235.500951][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 235.685151][T11075] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.774633][ T5935] hid-generic 0005:0C45:0004.0007: item fetching failed at offset 0/1 [ 235.812326][ T5935] hid-generic 0005:0C45:0004.0007: probe with driver hid-generic failed with error -22 [ 235.834791][T11075] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.874392][T11086] pimreg: entered allmulticast mode [ 235.903393][T11075] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.960779][T11091] FAULT_INJECTION: forcing a failure. [ 235.960779][T11091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.974227][T11091] CPU: 1 UID: 0 PID: 11091 Comm: syz.0.1652 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 235.974256][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.974266][T11091] Call Trace: [ 235.974273][T11091] [ 235.974281][T11091] dump_stack_lvl+0x189/0x250 [ 235.974314][T11091] ? __pfx____ratelimit+0x10/0x10 [ 235.974336][T11091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.974363][T11091] ? __pfx__printk+0x10/0x10 [ 235.974381][T11091] ? __might_fault+0xb0/0x130 [ 235.974419][T11091] should_fail_ex+0x414/0x560 [ 235.974444][T11091] _copy_from_iter+0x1db/0x16f0 [ 235.974474][T11091] ? rcu_is_watching+0x15/0xb0 [ 235.974502][T11091] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 235.974532][T11091] ? __pfx__copy_from_iter+0x10/0x10 [ 235.974558][T11091] ? __build_skb_around+0x257/0x3e0 [ 235.974584][T11091] ? netlink_sendmsg+0x642/0xb30 [ 235.974604][T11091] ? skb_put+0x11b/0x210 [ 235.974630][T11091] netlink_sendmsg+0x6b2/0xb30 [ 235.974659][T11091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.974684][T11091] ? aa_sock_msg_perm+0x94/0x160 [ 235.974708][T11091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 235.974730][T11091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.974752][T11091] __sock_sendmsg+0x219/0x270 [ 235.974774][T11091] ____sys_sendmsg+0x505/0x830 [ 235.974804][T11091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 235.974837][T11091] ? import_iovec+0x74/0xa0 [ 235.974855][T11091] ___sys_sendmsg+0x21f/0x2a0 [ 235.974882][T11091] ? __pfx____sys_sendmsg+0x10/0x10 [ 235.974938][T11091] ? __fget_files+0x2a/0x420 [ 235.974957][T11091] ? __fget_files+0x3a0/0x420 [ 235.974991][T11091] __x64_sys_sendmsg+0x19b/0x260 [ 235.975019][T11091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 235.975059][T11091] ? __pfx_ksys_write+0x10/0x10 [ 235.975084][T11091] ? rcu_is_watching+0x15/0xb0 [ 235.975115][T11091] ? do_syscall_64+0xbe/0x3b0 [ 235.975142][T11091] do_syscall_64+0xfa/0x3b0 [ 235.975162][T11091] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.975180][T11091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.975197][T11091] ? clear_bhb_loop+0x60/0xb0 [ 235.975233][T11091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.975249][T11091] RIP: 0033:0x7f748e38e929 [ 235.975264][T11091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.975279][T11091] RSP: 002b:00007f748c1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.975299][T11091] RAX: ffffffffffffffda RBX: 00007f748e5b5fa0 RCX: 00007f748e38e929 [ 235.975311][T11091] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 235.975322][T11091] RBP: 00007f748c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 235.975332][T11091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.975342][T11091] R13: 0000000000000000 R14: 00007f748e5b5fa0 R15: 00007ffc95a947e8 [ 235.975367][T11091] [ 236.283917][T11075] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.444407][ T6777] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.500466][ T6768] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.579457][ T6768] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.638072][ T6768] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.694608][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 236.734522][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 236.911108][T11113] veth7: entered promiscuous mode [ 236.919684][T11113] bridge4: port 1(veth7) entered blocking state [ 236.948488][T11113] bridge4: port 1(veth7) entered disabled state [ 236.973664][T11113] veth7: entered allmulticast mode [ 237.230555][T11133] bridge1: entered promiscuous mode [ 237.260017][T11133] bridge1: entered allmulticast mode [ 237.711585][T11155] FAULT_INJECTION: forcing a failure. [ 237.711585][T11155] name failslab, interval 1, probability 0, space 0, times 0 [ 237.749902][T11155] CPU: 0 UID: 0 PID: 11155 Comm: syz.4.1674 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 237.749935][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.749949][T11155] Call Trace: [ 237.749958][T11155] [ 237.749968][T11155] dump_stack_lvl+0x189/0x250 [ 237.750007][T11155] ? __pfx____ratelimit+0x10/0x10 [ 237.750032][T11155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.750066][T11155] ? __pfx__printk+0x10/0x10 [ 237.750096][T11155] ? __pfx___might_resched+0x10/0x10 [ 237.750141][T11155] should_fail_ex+0x414/0x560 [ 237.750173][T11155] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 237.750197][T11155] should_failslab+0xa8/0x100 [ 237.750221][T11155] __kvmalloc_node_noprof+0x161/0x5f0 [ 237.750244][T11155] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 237.750276][T11155] bpf_test_run_xdp_live+0x18e/0x1b10 [ 237.750307][T11155] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 237.750340][T11155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.750378][T11155] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 237.750403][T11155] ? bpf_dispatcher_xdp+0x800/0x1000 [ 237.750424][T11155] ? bpf_dispatcher_xdp+0x800/0x1000 [ 237.750504][T11155] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 237.750540][T11155] ? _copy_from_user+0x94/0xb0 [ 237.750562][T11155] ? bpf_test_init+0x133/0x170 [ 237.750585][T11155] ? xdp_convert_md_to_buff+0x5b/0x330 [ 237.750613][T11155] bpf_prog_test_run_xdp+0x713/0x1000 [ 237.750659][T11155] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.750692][T11155] ? __fget_files+0x2a/0x420 [ 237.750721][T11155] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.750749][T11155] bpf_prog_test_run+0x2c4/0x340 [ 237.750784][T11155] __sys_bpf+0x4a4/0x860 [ 237.750815][T11155] ? __pfx___sys_bpf+0x10/0x10 [ 237.750858][T11155] ? ksys_write+0x22a/0x250 [ 237.750895][T11155] ? __pfx_ksys_write+0x10/0x10 [ 237.750937][T11155] __x64_sys_bpf+0x7c/0x90 [ 237.750963][T11155] do_syscall_64+0xfa/0x3b0 [ 237.750986][T11155] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.751010][T11155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.751031][T11155] ? clear_bhb_loop+0x60/0xb0 [ 237.751058][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.751079][T11155] RIP: 0033:0x7fe11078e929 [ 237.751097][T11155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.751122][T11155] RSP: 002b:00007fe11159a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.751146][T11155] RAX: ffffffffffffffda RBX: 00007fe1109b6080 RCX: 00007fe11078e929 [ 237.751162][T11155] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 237.751176][T11155] RBP: 00007fe11159a090 R08: 0000000000000000 R09: 0000000000000000 [ 237.751190][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.751202][T11155] R13: 0000000000000001 R14: 00007fe1109b6080 R15: 00007ffcb9b06638 [ 237.751237][T11155] [ 238.004523][T11134] infiniband syz1: set down [ 238.109660][T11134] infiniband syz1: added macvlan1 [ 238.119730][T11134] syz1: rxe_create_cq: returned err = -12 [ 238.130162][T11134] infiniband syz1: Couldn't create ib_mad CQ [ 238.137371][T11134] infiniband syz1: Couldn't open port 1 [ 238.172790][T11157] __nla_validate_parse: 1 callbacks suppressed [ 238.172809][T11157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1675'. [ 238.193147][T11157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1675'. [ 238.283819][T11158] netlink: 1428 bytes leftover after parsing attributes in process `syz.1.1675'. [ 238.339048][T11134] RDS/IB: syz1: added [ 238.351361][T11134] smc: adding ib device syz1 with port count 1 [ 238.363724][T11134] smc: ib device syz1 port 1 has pnetid SYZ2 (user defined) [ 238.748301][T11165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 238.780836][T11165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.789685][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'. [ 238.981822][T11167] veth1: entered promiscuous mode [ 238.987805][T11167] bridge1: port 1(veth1) entered blocking state [ 238.994302][T11167] bridge1: port 1(veth1) entered disabled state [ 239.001035][T11167] veth1: entered allmulticast mode [ 239.227896][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1685'. [ 239.330574][T11178] bridge2: port 1(ip6gretap1) entered blocking state [ 239.332733][T11182] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1686'. [ 239.348352][T11178] bridge2: port 1(ip6gretap1) entered disabled state [ 239.365710][T11178] ip6gretap1: entered allmulticast mode [ 239.392888][T11178] ip6gretap1: entered promiscuous mode [ 239.488559][T11184] veth3: entered promiscuous mode [ 239.494071][T11184] bridge2: port 2(veth3) entered blocking state [ 239.517785][T11184] bridge2: port 2(veth3) entered disabled state [ 239.554089][T11184] veth3: entered allmulticast mode [ 239.592507][T11189] syz.2.1688 uses old SIOCAX25GETINFO [ 239.633705][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 239.667202][T11191] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1689'. [ 239.703983][T11192] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1689'. [ 239.983553][T11198] netlink: 'syz.1.1692': attribute type 1 has an invalid length. [ 241.060400][T11229] IPVS: length: 209 != 24 [ 241.228220][T11233] netlink: 'syz.4.1704': attribute type 2 has an invalid length. [ 241.325793][T11238] netlink: 'syz.4.1704': attribute type 1 has an invalid length. [ 241.806198][T11257] FAULT_INJECTION: forcing a failure. [ 241.806198][T11257] name failslab, interval 1, probability 0, space 0, times 0 [ 241.845670][T11257] CPU: 0 UID: 0 PID: 11257 Comm: syz.2.1710 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 241.845701][T11257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.845721][T11257] Call Trace: [ 241.845729][T11257] [ 241.845738][T11257] dump_stack_lvl+0x189/0x250 [ 241.845776][T11257] ? __pfx____ratelimit+0x10/0x10 [ 241.845799][T11257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.845832][T11257] ? __pfx__printk+0x10/0x10 [ 241.845861][T11257] ? __pfx___might_resched+0x10/0x10 [ 241.845898][T11257] should_fail_ex+0x414/0x560 [ 241.845929][T11257] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 241.845952][T11257] should_failslab+0xa8/0x100 [ 241.845977][T11257] __kvmalloc_node_noprof+0x161/0x5f0 [ 241.845999][T11257] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 241.846030][T11257] bpf_test_run_xdp_live+0x18e/0x1b10 [ 241.846060][T11257] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 241.846092][T11257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.846132][T11257] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 241.846156][T11257] ? bpf_dispatcher_xdp+0x800/0x1000 [ 241.846177][T11257] ? bpf_dispatcher_xdp+0x800/0x1000 [ 241.846249][T11257] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 241.846283][T11257] ? _copy_from_user+0x94/0xb0 [ 241.846303][T11257] ? bpf_test_init+0x133/0x170 [ 241.846324][T11257] ? xdp_convert_md_to_buff+0x5b/0x330 [ 241.846351][T11257] bpf_prog_test_run_xdp+0x713/0x1000 [ 241.846394][T11257] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 241.846425][T11257] ? __fget_files+0x2a/0x420 [ 241.846453][T11257] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 241.846480][T11257] bpf_prog_test_run+0x2c4/0x340 [ 241.846513][T11257] __sys_bpf+0x4a4/0x860 [ 241.846548][T11257] ? __pfx___sys_bpf+0x10/0x10 [ 241.846589][T11257] ? ksys_write+0x22a/0x250 [ 241.846623][T11257] ? __pfx_ksys_write+0x10/0x10 [ 241.846662][T11257] __x64_sys_bpf+0x7c/0x90 [ 241.846687][T11257] do_syscall_64+0xfa/0x3b0 [ 241.846710][T11257] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.846732][T11257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.846752][T11257] ? clear_bhb_loop+0x60/0xb0 [ 241.846777][T11257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.846797][T11257] RIP: 0033:0x7f3d8c18e929 [ 241.846814][T11257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.846833][T11257] RSP: 002b:00007f3d8cfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.846855][T11257] RAX: ffffffffffffffda RBX: 00007f3d8c3b6080 RCX: 00007f3d8c18e929 [ 241.846870][T11257] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 241.846883][T11257] RBP: 00007f3d8cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 241.846896][T11257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.846908][T11257] R13: 0000000000000001 R14: 00007f3d8c3b6080 R15: 00007ffc48c89278 [ 241.846941][T11257] [ 242.299730][T11262] netlink: 'syz.1.1713': attribute type 3 has an invalid length. [ 242.307717][T11262] netlink: 'syz.1.1713': attribute type 2 has an invalid length. [ 242.360064][T11266] bond0: entered promiscuous mode [ 242.381981][T11266] bond_slave_0: entered promiscuous mode [ 242.402455][T11266] bond_slave_1: entered promiscuous mode [ 242.424947][T11266] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.451375][T11266] bond0: left promiscuous mode [ 242.458224][T11266] bond_slave_0: left promiscuous mode [ 242.465123][T11266] bond_slave_1: left promiscuous mode [ 242.792317][T11291] macsec1: entered allmulticast mode [ 242.811038][T11291] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 242.864409][T11291] batman_adv: batadv0: Adding interface: macsec1 [ 242.911431][T11291] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.948229][T11291] batman_adv: batadv0: Interface activated: macsec1 [ 243.166567][T11306] FAULT_INJECTION: forcing a failure. [ 243.166567][T11306] name failslab, interval 1, probability 0, space 0, times 0 [ 243.195679][T11306] CPU: 1 UID: 0 PID: 11306 Comm: syz.0.1728 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 243.195712][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.195725][T11306] Call Trace: [ 243.195733][T11306] [ 243.195742][T11306] dump_stack_lvl+0x189/0x250 [ 243.195790][T11306] ? __pfx____ratelimit+0x10/0x10 [ 243.195814][T11306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.195849][T11306] ? __pfx__printk+0x10/0x10 [ 243.195887][T11306] should_fail_ex+0x414/0x560 [ 243.195920][T11306] should_failslab+0xa8/0x100 [ 243.195945][T11306] kmem_cache_alloc_noprof+0x73/0x3c0 [ 243.195978][T11306] ? __nf_conntrack_alloc+0x99/0x380 [ 243.196014][T11306] __nf_conntrack_alloc+0x99/0x380 [ 243.196052][T11306] ctnetlink_new_conntrack+0x571/0x2070 [ 243.196091][T11306] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.196119][T11306] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 243.196146][T11306] ? rcu_is_watching+0x15/0xb0 [ 243.196180][T11306] ? trace_contention_end+0x39/0x120 [ 243.196203][T11306] ? __mutex_lock+0x330/0xe80 [ 243.196233][T11306] ? __lock_acquire+0xab9/0xd20 [ 243.196266][T11306] ? nfnetlink_rcv_msg+0x9dc/0x1130 [ 243.196318][T11306] nfnetlink_rcv_msg+0xb4d/0x1130 [ 243.196339][T11306] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 243.196382][T11306] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 243.196400][T11306] ? __lock_acquire+0xab9/0xd20 [ 243.196464][T11306] ? __lock_acquire+0xab9/0xd20 [ 243.196512][T11306] netlink_rcv_skb+0x208/0x470 [ 243.196540][T11306] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 243.196563][T11306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 243.196603][T11306] ? bpf_lsm_capable+0x9/0x20 [ 243.196621][T11306] ? security_capable+0x7e/0x2e0 [ 243.196657][T11306] nfnetlink_rcv+0x26a/0x2520 [ 243.196692][T11306] ? unwind_get_return_address+0x4d/0x90 [ 243.196725][T11306] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.196748][T11306] ? arch_stack_walk+0xfc/0x150 [ 243.196790][T11306] ? stack_trace_save+0x9c/0xe0 [ 243.196816][T11306] ? stack_depot_save_flags+0x40/0x900 [ 243.196848][T11306] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 243.196885][T11306] ? kasan_save_track+0x4f/0x80 [ 243.196914][T11306] ? kasan_save_track+0x3e/0x80 [ 243.196952][T11306] ? __lock_acquire+0xab9/0xd20 [ 243.197009][T11306] ? __lock_acquire+0xab9/0xd20 [ 243.197052][T11306] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.197085][T11306] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.197111][T11306] ? netlink_deliver_tap+0x2e/0x1b0 [ 243.197155][T11306] netlink_unicast+0x75b/0x8d0 [ 243.197191][T11306] netlink_sendmsg+0x805/0xb30 [ 243.197228][T11306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.197258][T11306] ? aa_sock_msg_perm+0x94/0x160 [ 243.197286][T11306] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.197311][T11306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.197338][T11306] __sock_sendmsg+0x219/0x270 [ 243.197364][T11306] ____sys_sendmsg+0x505/0x830 [ 243.197400][T11306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.197440][T11306] ? import_iovec+0x74/0xa0 [ 243.197464][T11306] ___sys_sendmsg+0x21f/0x2a0 [ 243.197496][T11306] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.197568][T11306] ? __fget_files+0x2a/0x420 [ 243.197590][T11306] ? __fget_files+0x3a0/0x420 [ 243.197624][T11306] __x64_sys_sendmsg+0x19b/0x260 [ 243.197658][T11306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.197699][T11306] ? __pfx_ksys_write+0x10/0x10 [ 243.197727][T11306] ? rcu_is_watching+0x15/0xb0 [ 243.197769][T11306] ? do_syscall_64+0xbe/0x3b0 [ 243.197799][T11306] do_syscall_64+0xfa/0x3b0 [ 243.197822][T11306] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.197845][T11306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.197865][T11306] ? clear_bhb_loop+0x60/0xb0 [ 243.197890][T11306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.197910][T11306] RIP: 0033:0x7f748e38e929 [ 243.197948][T11306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.197967][T11306] RSP: 002b:00007f748c1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.197990][T11306] RAX: ffffffffffffffda RBX: 00007f748e5b5fa0 RCX: 00007f748e38e929 [ 243.198006][T11306] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 243.198019][T11306] RBP: 00007f748c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 243.198033][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.198045][T11306] R13: 0000000000000000 R14: 00007f748e5b5fa0 R15: 00007ffc95a947e8 [ 243.198080][T11306] [ 244.066904][T11332] netlink: 'syz.0.1736': attribute type 5 has an invalid length. [ 244.074734][T11332] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 244.086737][T11332] __nla_validate_parse: 17 callbacks suppressed [ 244.086752][T11332] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1736'. [ 244.294202][ T5203] udevd[5203]: worker [6211] terminated by signal 33 (Unknown signal 33) [ 244.317978][ T5203] udevd[5203]: worker [6211] failed while handling '/devices/virtual/block/loop3' [ 244.340503][T11348] netlink: 'syz.2.1741': attribute type 10 has an invalid length. [ 244.720295][T11361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1746'. [ 244.745195][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1746'. [ 245.229062][ T6770] veth1: left allmulticast mode [ 245.246927][ T6770] bridge1: port 1(veth1) entered disabled state [ 245.294235][ T6770] veth3: left allmulticast mode [ 245.312758][ T6770] bridge2: port 2(veth3) entered disabled state [ 245.350258][ T6770] ip6gretap1: left allmulticast mode [ 245.364902][ T6770] ip6gretap1: left promiscuous mode [ 245.375995][T11382] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1755'. [ 245.380064][ T6770] bridge2: port 1(ip6gretap1) entered disabled state [ 245.844609][T11397] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1760'. [ 245.858845][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.879230][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.893669][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.910252][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.938574][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.116332][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1763'. [ 246.261769][ T6770] $Hÿ (unregistering): (slave wlan1): Releasing backup interface [ 246.270376][ T6770] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 246.284311][ T6770] $Hÿ (unregistering): Released all slaves [ 246.372633][ T6770] bond1 (unregistering): Released all slaves [ 246.463444][ T6770] bond2 (unregistering): Released all slaves [ 246.483250][T11377] pim6reg9: entered allmulticast mode [ 246.623903][T11409] veth7: entered promiscuous mode [ 246.642902][T11409] bridge2: port 1(veth7) entered blocking state [ 246.663844][T11409] bridge2: port 1(veth7) entered disabled state [ 246.678452][T11409] veth7: entered allmulticast mode [ 246.730064][ T6770] tipc: Left network mode [ 246.734758][T11413] bridge_slave_0: left allmulticast mode [ 246.753011][T11413] bridge_slave_0: left promiscuous mode [ 246.797775][T11413] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.901241][T11413] bridge_slave_1: left allmulticast mode [ 246.967363][T11413] bridge_slave_1: left promiscuous mode [ 246.990123][T11413] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.030032][T11413] bond0: (slave bond_slave_0): Releasing backup interface [ 247.124184][T11413] bond0: (slave bond_slave_1): Releasing backup interface [ 247.142988][T11413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.194241][T11413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.223059][T11413] batman_adv: batadv0: Interface deactivated: macsec1 [ 247.230706][T11413] batman_adv: batadv0: Removing interface: macsec1 [ 247.264934][T11440] bond0: entered promiscuous mode [ 247.281819][T11440] bond_slave_0: entered promiscuous mode [ 247.297687][T11440] bond_slave_1: entered promiscuous mode [ 247.304198][T11440] team0: entered promiscuous mode [ 247.319902][T11440] team_slave_0: entered promiscuous mode [ 247.333384][T11440] team_slave_1: entered promiscuous mode [ 247.357573][T11440] batadv_slave_0: entered promiscuous mode [ 247.372803][T11440] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 247.415136][T11440] Cannot create hsr debugfs directory [ 247.428395][T11440] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 247.452060][T11440] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.475891][T11440] hsr1: entered promiscuous mode [ 247.487112][T11417] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 247.545015][T11417] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 247.890578][T11426] vlan0: entered promiscuous mode [ 248.016086][ T5841] Bluetooth: hci1: command tx timeout [ 248.157731][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1771'. [ 248.303935][T11448] veth9: entered promiscuous mode [ 248.313746][T11448] bridge3: port 1(veth9) entered blocking state [ 248.324993][T11448] bridge3: port 1(veth9) entered disabled state [ 248.331927][T11448] veth9: entered allmulticast mode [ 248.455325][T11460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1775'. [ 248.603712][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 248.635311][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 249.511729][T11504] __nla_validate_parse: 1 callbacks suppressed [ 249.511750][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1788'. [ 250.089203][T11504] vlan2: entered promiscuous mode [ 250.095870][ T5841] Bluetooth: hci1: command tx timeout [ 250.110440][T11504] vlan1: entered promiscuous mode [ 251.380455][T11399] chnl_net:caif_netlink_parms(): no params data found [ 251.708435][T11399] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.735326][T11399] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.760498][T11399] bridge_slave_0: entered allmulticast mode [ 251.785542][T11399] bridge_slave_0: entered promiscuous mode [ 251.786901][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'. [ 251.839233][T11399] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.859204][T11399] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.886040][T11399] bridge_slave_1: entered allmulticast mode [ 251.894030][T11399] bridge_slave_1: entered promiscuous mode [ 251.982002][T11544] veth9: entered promiscuous mode [ 251.990812][T11544] bridge5: port 1(veth9) entered blocking state [ 251.998388][T11544] bridge5: port 1(veth9) entered disabled state [ 252.006345][T11544] veth9: entered allmulticast mode [ 252.032069][T11548] sctp: [Deprecated]: syz.1.1798 (pid 11548) Use of int in max_burst socket option. [ 252.032069][T11548] Use struct sctp_assoc_value instead [ 252.060283][T11399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.093768][T11399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.109335][ T6770] IPVS: stop unused estimator thread 0... [ 252.148473][T11549] sctp: [Deprecated]: syz.1.1798 (pid 11549) Use of int in max_burst socket option. [ 252.148473][T11549] Use struct sctp_assoc_value instead [ 252.178622][ T5848] Bluetooth: hci1: command tx timeout [ 252.247780][T11399] team0: Port device team_slave_0 added [ 252.267292][T11399] team0: Port device team_slave_1 added [ 252.382473][T11399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.423675][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.501079][T11399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.550918][T11399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.586139][T11399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.609234][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1804'. [ 252.634015][T11399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.850269][T11581] vlan2: entered promiscuous mode [ 253.014186][T11399] hsr_slave_0: entered promiscuous mode [ 253.034921][T11399] hsr_slave_1: entered promiscuous mode [ 253.063404][T11399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.073940][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1810'. [ 253.102574][T11399] Cannot create hsr debugfs directory [ 253.254376][T11591] veth11: entered promiscuous mode [ 253.260927][T11591] bridge4: port 1(veth11) entered blocking state [ 253.284242][T11591] bridge4: port 1(veth11) entered disabled state [ 253.311615][T11591] veth11: entered allmulticast mode [ 253.671792][T11619] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1817'. [ 253.963340][T11624] vlan2: entered promiscuous mode [ 254.120076][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 254.144522][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 254.166830][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 254.185481][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 254.212598][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 254.256276][ T5848] Bluetooth: hci1: command 0x0419 tx timeout [ 254.480081][T11646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.502211][T11646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.712208][T11399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.725438][T11658] netlink: 'syz.4.1832': attribute type 13 has an invalid length. [ 254.739248][T11658] netlink: 'syz.4.1832': attribute type 17 has an invalid length. [ 254.762667][T11399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.777863][T11399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.004628][T11658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.021815][T11658] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.054056][T11658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.076666][T11399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.231145][T11658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.430944][T11658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.480972][T11399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.565159][T11695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'. [ 255.588320][T11399] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.623519][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630214][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.643515][T11696] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 255.680047][T11696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1843'. [ 255.764656][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.771941][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.804102][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.811343][ T6777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.985110][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1845'. [ 256.151734][T11710] veth5: entered promiscuous mode [ 256.160624][T11710] bridge2: port 1(veth5) entered blocking state [ 256.186075][T11710] bridge2: port 1(veth5) entered disabled state [ 256.192599][T11710] veth5: entered allmulticast mode [ 256.346023][ T5841] Bluetooth: hci1: command 0x0419 tx timeout [ 256.493174][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.756011][T11399] veth0_vlan: entered promiscuous mode [ 256.821936][T11399] veth1_vlan: entered promiscuous mode [ 257.000627][T11399] veth0_macvtap: entered promiscuous mode [ 257.045306][T11399] veth1_macvtap: entered promiscuous mode [ 257.112946][T11399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.178155][T11399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.308449][ T6777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.322040][ T6777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.341702][ T6777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.360905][ T6777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.410313][T11742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1856'. [ 257.575771][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.605949][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.653700][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 257.662748][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.662770][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.379374][ T3547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.434069][T11772] vlan2: entered promiscuous mode [ 258.566911][ T3547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.722836][ T3547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.873629][T11782] 8021q: VLANs not supported on nlmon0 [ 258.919299][ T3547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.113371][T11790] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.290986][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1872'. [ 259.311530][T11796] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1874'. [ 259.446106][T11799] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1874'. [ 259.470437][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.490079][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.499493][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.508015][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.516846][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.538402][ T3547] bridge_slave_1: left allmulticast mode [ 259.555731][ T3547] bridge_slave_1: left promiscuous mode [ 259.561617][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.587614][ T3547] bridge_slave_0: left allmulticast mode [ 259.593301][ T3547] bridge_slave_0: left promiscuous mode [ 259.599450][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.811219][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 259.944185][T11810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1876'. [ 259.953610][T11810] netlink: 'syz.3.1876': attribute type 3 has an invalid length. [ 259.961880][T11810] netlink: 'syz.3.1876': attribute type 2 has an invalid length. [ 260.064144][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.076993][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.090760][ T3547] bond0 (unregistering): Released all slaves [ 260.214254][T11788] mpoa:mpoad_close: () going down [ 260.773487][ T5936] hid-generic 0005:0C45:0004.0008: item fetching failed at offset 0/1 [ 260.783429][ T5936] hid-generic 0005:0C45:0004.0008: probe with driver hid-generic failed with error -22 [ 261.026409][T11826] ip6tnl1: entered promiscuous mode [ 261.049832][T11826] ip6tnl1: entered allmulticast mode [ 261.065109][T11826] team0: Device ip6tnl1 is of different type [ 261.229558][ T3547] hsr_slave_0: left promiscuous mode [ 261.258901][ T3547] hsr_slave_1: left promiscuous mode [ 261.277741][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.307671][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.334874][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.349679][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.416884][ T3547] veth1_macvtap: left promiscuous mode [ 261.423847][T11839] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 261.433374][ T3547] veth0_macvtap: left promiscuous mode [ 261.439247][ T3547] veth1_vlan: left promiscuous mode [ 261.444724][ T3547] veth0_vlan: left promiscuous mode [ 261.622145][ T5848] Bluetooth: hci1: command tx timeout [ 261.661417][T11850] __nla_validate_parse: 8 callbacks suppressed [ 261.661437][T11850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1887'. [ 261.964950][ T3547] team0 (unregistering): Port device team_slave_1 removed [ 262.002863][ T3547] team0 (unregistering): Port device team_slave_0 removed [ 262.494658][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1888'. [ 262.573182][T11842] team0: Port device vxlan1 added [ 262.607569][T11852] veth13: entered promiscuous mode [ 262.613056][T11852] bridge5: port 1(veth13) entered blocking state [ 262.622153][T11852] bridge5: port 1(veth13) entered disabled state [ 262.628860][T11852] veth13: entered allmulticast mode [ 262.754970][T11856] veth3: entered promiscuous mode [ 262.763971][T11856] bridge1: port 1(veth3) entered blocking state [ 262.777668][T11856] bridge1: port 1(veth3) entered disabled state [ 262.794603][T11856] veth3: entered allmulticast mode [ 262.809133][ T6768] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.825678][ T6768] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.855208][ T6768] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.885157][ T6768] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.080738][T11872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1894'. [ 263.249397][T11880] IPVS: set_ctl: invalid protocol: 58 172.30.0.4:20003 [ 263.260278][T11800] chnl_net:caif_netlink_parms(): no params data found [ 263.316016][T11879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1897'. [ 263.430393][T11800] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.438322][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.446423][T11800] bridge_slave_0: entered allmulticast mode [ 263.454712][T11800] bridge_slave_0: entered promiscuous mode [ 263.464424][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.472511][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.481336][T11800] bridge_slave_1: entered allmulticast mode [ 263.489511][T11800] bridge_slave_1: entered promiscuous mode [ 263.490179][T11890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1897'. [ 263.611286][T11800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.657721][T11800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.697844][ T5848] Bluetooth: hci1: command tx timeout [ 263.734686][T11800] team0: Port device team_slave_0 added [ 263.757183][T11800] team0: Port device team_slave_1 added [ 263.880804][T11800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.888302][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.917633][T11800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.930621][T11800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.943490][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.975843][T11800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.117916][T11800] hsr_slave_0: entered promiscuous mode [ 264.124657][T11800] hsr_slave_1: entered promiscuous mode [ 264.144299][T11912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1904'. [ 264.148652][T11800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.172021][T11800] Cannot create hsr debugfs directory [ 264.651758][T11923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 264.817733][T11903] mpoa:mpoad_close: () going down [ 264.981400][T11933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.021045][T11936] bond3: (slave veth11): Enslaving as an active interface with an up link [ 265.098702][T11933] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 265.342066][T11800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.367825][T11800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.379472][T11800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.392790][T11800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.551931][T11800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.580032][T11800] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.611472][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.618724][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.646198][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.653383][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.776017][ T5848] Bluetooth: hci1: command tx timeout [ 266.143483][T11800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.214168][T11980] netlink: 210 bytes leftover after parsing attributes in process `syz.2.1928'. [ 266.255614][T11800] veth0_vlan: entered promiscuous mode [ 266.296145][T11800] veth1_vlan: entered promiscuous mode [ 266.393096][T11800] veth0_macvtap: entered promiscuous mode [ 266.419186][T11800] veth1_macvtap: entered promiscuous mode [ 266.491356][T11800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.507601][T11800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.552867][ T6768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.578134][ T6768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.614936][ T6768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.638117][ T6768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.664913][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 266.833529][ T5935] IPVS: starting estimator thread 0... [ 266.879616][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.924396][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.945956][T12001] IPVS: using max 25 ests per chain, 60000 per kthread [ 267.036857][ T6770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.071194][ T6770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.658267][T12042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1953'. [ 267.707923][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 268.294977][T12075] netlink: 'syz.1.1970': attribute type 1 has an invalid length. [ 268.337142][T12075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.363507][T12075] bond1: (slave ip6erspan0): making interface the new active one [ 268.373746][T12075] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 268.455414][ T6774] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.299760][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 269.311110][T12093] netlink: 'syz.2.1978': attribute type 5 has an invalid length. [ 269.467983][T12098] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1981'. [ 269.487439][T12099] macsec2: entered promiscuous mode [ 269.511339][T12099] macsec0: entered promiscuous mode [ 269.517559][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.526651][T12099] macsec2: entered allmulticast mode [ 269.531970][T12099] macsec0: entered allmulticast mode [ 269.538737][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.550551][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.562077][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.573255][T12099] macsec0: left allmulticast mode [ 269.585928][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.614381][T12099] macsec0: left promiscuous mode [ 269.719753][ T6774] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.880667][T12114] Set syz1 is full, maxelem 65536 reached [ 269.927461][ T6774] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.066207][ T6774] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.334640][ T6774] bridge_slave_1: left allmulticast mode [ 270.353116][ T6774] bridge_slave_1: left promiscuous mode [ 270.365995][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.412797][ T6774] bridge_slave_0: left allmulticast mode [ 270.470620][ T6774] bridge_slave_0: left promiscuous mode [ 270.481367][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.606861][T12138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1995'. [ 270.909864][ T6774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.921131][ T6774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.932925][ T6774] bond0 (unregistering): Released all slaves [ 271.232605][T12153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1998'. [ 271.616121][ T5848] Bluetooth: hci1: command tx timeout [ 271.647226][T12160] tipc: Started in network mode [ 271.677086][T12160] tipc: Node identity ac1414aa, cluster identity 4711 [ 271.710100][T12160] tipc: Enabled bearer , priority 10 [ 272.413338][T12103] chnl_net:caif_netlink_parms(): no params data found [ 272.702306][ T6774] hsr_slave_0: left promiscuous mode [ 272.715032][ T6774] hsr_slave_1: left promiscuous mode [ 272.730325][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.758657][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.790099][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.824365][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.827400][ T5897] tipc: Node number set to 2886997162 [ 272.898780][ T6774] veth1_macvtap: left promiscuous mode [ 272.914004][ T6774] veth0_macvtap: left promiscuous mode [ 272.945876][ T6774] veth1_vlan: left promiscuous mode [ 272.961512][ T6774] veth0_vlan: left promiscuous mode [ 273.697110][ T5848] Bluetooth: hci1: command tx timeout [ 274.051695][ T6774] team0 (unregistering): Port device team_slave_1 removed [ 274.101421][ T6774] team0 (unregistering): Port device team_slave_0 removed [ 274.267185][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 274.277504][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 274.738994][T12103] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.756261][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.763502][T12103] bridge_slave_0: entered allmulticast mode [ 274.773124][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 274.788702][T12103] bridge_slave_0: entered promiscuous mode [ 274.789404][T12252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2033'. [ 274.809083][T12103] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.821059][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.835801][T12103] bridge_slave_1: entered allmulticast mode [ 274.853307][T12103] bridge_slave_1: entered promiscuous mode [ 274.857857][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'. [ 274.950688][T12252] geneve0: entered promiscuous mode [ 274.963496][T12252] geneve0: entered allmulticast mode [ 274.982990][T12103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.014784][T12103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.152885][T12103] team0: Port device team_slave_0 added [ 275.169620][T12103] team0: Port device team_slave_1 added [ 275.350514][T12103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.377172][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.433475][T12103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.482630][T12103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.513886][T12103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.589675][T12103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.601482][T12283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2045'. [ 275.637083][T12280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2045'. [ 275.770370][T12289] xt_CT: No such helper "syz0" [ 275.774813][T12103] hsr_slave_0: entered promiscuous mode [ 275.775900][ T5848] Bluetooth: hci1: command tx timeout [ 275.783764][T12103] hsr_slave_1: entered promiscuous mode [ 275.793135][T12103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.801771][T12103] Cannot create hsr debugfs directory [ 275.959548][T12298] bond0: (slave team0): Releasing backup interface [ 275.982592][T12298] team0: left promiscuous mode [ 275.990780][T12298] team_slave_0: left promiscuous mode [ 276.001132][T12298] team_slave_1: left promiscuous mode [ 276.020877][T12298] bridge_slave_0: left allmulticast mode [ 276.027528][T12298] bridge_slave_0: left promiscuous mode [ 276.034232][T12298] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.055366][T12298] bridge_slave_1: left allmulticast mode [ 276.066659][T12298] bridge_slave_1: left promiscuous mode [ 276.073519][T12298] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.106175][T12298] bond3: (slave veth0_to_bond): Releasing backup interface [ 276.124026][T12310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2056'. [ 276.137103][T12310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2056'. [ 276.148654][T12298] bond0: (slave bond_slave_0): Releasing backup interface [ 276.164219][T12298] bond_slave_0: left promiscuous mode [ 276.181899][T12298] bond0: (slave bond_slave_1): Releasing backup interface [ 276.190764][T12298] bond_slave_1: left promiscuous mode [ 276.208933][T12298] team0: Port device team_slave_0 removed [ 276.232862][T12298] team0: Port device team_slave_1 removed [ 276.246520][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.260100][T12298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.268765][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.276640][T12298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.292143][T12298] bond1: (slave bond2): Releasing backup interface [ 276.298926][T12298] bond1: (slave bond2): the permanent HWaddr of slave - 5a:19:44:5a:17:4b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 276.317531][T12298] bond1: (slave gretap2): making interface the new active one [ 276.339860][T12298] bond1: (slave gretap2): Releasing backup interface [ 276.357768][T12298] veth7: left allmulticast mode [ 276.362803][T12298] bridge4: port 1(veth7) entered disabled state [ 276.373045][T12298] veth9: left allmulticast mode [ 276.379123][T12298] bridge5: port 1(veth9) entered disabled state [ 276.392597][T12298] bond3: (slave veth11): Releasing backup interface [ 276.722664][T12320] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2061'. [ 276.734527][T12320] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 276.743877][T12298] syz.2.2053 (12298) used greatest stack depth: 15000 bytes left [ 276.765852][T12320] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 276.823005][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805917a000: rx timeout, send abort [ 277.082239][T12103] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.100326][T12103] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.120390][T12103] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.132563][T12103] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.318793][T12103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.332325][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805917a000: abort rx timeout. Force session deactivation [ 277.382783][T12103] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.404637][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.412202][ T6774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.439140][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.446346][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.798881][T12370] netlink: 'syz.3.2077': attribute type 10 has an invalid length. [ 277.856083][ T5848] Bluetooth: hci1: command tx timeout [ 278.169687][T12103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.278049][T12103] veth0_vlan: entered promiscuous mode [ 278.305200][T12103] veth1_vlan: entered promiscuous mode [ 278.382175][T12103] veth0_macvtap: entered promiscuous mode [ 278.403545][T12103] veth1_macvtap: entered promiscuous mode [ 278.465499][T12103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.493504][T12103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.515014][ T6772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.532410][ T6772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.556839][ T6772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.586373][ T6772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.729136][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.753656][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.793233][T12409] netlink: 'syz.2.2096': attribute type 5 has an invalid length. [ 278.821054][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.834996][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.857468][T12409] geneve2: entered promiscuous mode [ 278.862729][T12409] geneve2: entered allmulticast mode [ 278.915745][ T6772] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 278.944260][ T6772] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 278.968683][ T6772] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 279.009457][ T6772] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 279.457451][T12437] __nla_validate_parse: 5 callbacks suppressed [ 279.457474][T12437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'. [ 279.512400][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2108'. [ 279.626114][T12439] bond0: entered promiscuous mode [ 279.631208][T12439] bond_slave_0: entered promiscuous mode [ 279.643916][T12439] bond_slave_1: entered promiscuous mode [ 279.686709][T12439] batadv_slave_0: entered promiscuous mode [ 279.720239][T12439] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.771404][T12439] hsr1: entered promiscuous mode [ 280.390160][ T6772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.398767][ T6772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.443744][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2122'. [ 281.618049][ T6772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.674469][T12498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2124'. [ 281.805713][ T6772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.865949][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.875137][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.887910][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.905971][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.918396][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.119424][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'. [ 282.128908][T12511] netlink: 'syz.3.2130': attribute type 5 has an invalid length. [ 282.137462][T12511] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2130'. [ 282.154687][ T6772] bridge_slave_1: left allmulticast mode [ 282.164950][ T6772] bridge_slave_1: left promiscuous mode [ 282.174267][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.195874][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'. [ 282.209681][ T6772] bridge_slave_0: left allmulticast mode [ 282.225968][ T6772] bridge_slave_0: left promiscuous mode [ 282.236157][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.635542][ T6772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.649078][ T6772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.659330][ T6772] bond0 (unregistering): Released all slaves [ 282.682017][T12511] geneve4: entered promiscuous mode [ 282.688132][T12511] geneve4: entered allmulticast mode [ 282.763470][T12514] veth13: entered promiscuous mode [ 282.769184][T12514] bridge9: port 1(veth13) entered blocking state [ 282.779545][T12514] bridge9: port 1(veth13) entered disabled state [ 282.786413][T12514] veth13: entered allmulticast mode [ 282.860960][ T3547] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 282.870868][ T3547] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 282.983477][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 283.021603][ T3547] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 283.045276][ T3547] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 283.117552][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2136'. [ 283.152652][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 283.186611][T12525] netlink: 'syz.2.2136': attribute type 3 has an invalid length. [ 283.207980][T12525] netlink: 'syz.2.2136': attribute type 2 has an invalid length. [ 283.778830][T12551] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.801370][T12551] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 37430 - 0 [ 283.869853][T12551] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 284.016729][ T5852] Bluetooth: hci1: command tx timeout [ 284.133974][T12551] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.148008][T12551] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 37430 - 0 [ 284.173018][T12551] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 284.209485][ T6772] hsr_slave_0: left promiscuous mode [ 284.216593][ T6772] hsr_slave_1: left promiscuous mode [ 284.223055][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.231160][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.239287][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.247071][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.275094][ T6772] veth1_macvtap: left promiscuous mode [ 284.280736][ T6772] veth0_macvtap: left promiscuous mode [ 284.288107][ T6772] veth1_vlan: left promiscuous mode [ 284.293456][ T6772] veth0_vlan: left promiscuous mode [ 284.686949][ T6772] team0 (unregistering): Port device team_slave_1 removed [ 284.723373][ T6772] team0 (unregistering): Port device team_slave_0 removed [ 285.013001][T12572] __nla_validate_parse: 4 callbacks suppressed [ 285.013020][T12572] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2150'. [ 285.179913][T12565] veth7: entered promiscuous mode [ 285.185217][T12565] bridge4: port 1(veth7) entered blocking state [ 285.193663][T12565] bridge4: port 1(veth7) entered disabled state [ 285.200889][T12565] veth7: entered allmulticast mode [ 285.363124][T12572] bond0 (unregistering): left promiscuous mode [ 285.370820][T12572] bond0 (unregistering): Released all slaves [ 285.411548][T12551] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.424784][T12551] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 37430 - 0 [ 285.464815][T12551] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 285.466212][ T5936] IPVS: starting estimator thread 0... [ 285.575090][T12551] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.587180][T12581] IPVS: using max 26 ests per chain, 62400 per kthread [ 285.609520][T12551] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 37430 - 0 [ 285.625861][T12551] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 285.773694][T12504] chnl_net:caif_netlink_parms(): no params data found [ 286.096842][ T5852] Bluetooth: hci1: command tx timeout [ 286.150214][ T3547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 286.168904][ T3547] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.191140][ T3547] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 37430 - 0 [ 286.245151][ T3547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 286.255857][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 286.285788][ T3547] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.293988][ T3547] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 37430 - 0 [ 286.356619][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.363925][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.386454][T12504] bridge_slave_0: entered allmulticast mode [ 286.394767][T12504] bridge_slave_0: entered promiscuous mode [ 286.422739][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.433088][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.444708][T12504] bridge_slave_1: entered allmulticast mode [ 286.453332][T12504] bridge_slave_1: entered promiscuous mode [ 286.464896][ T6772] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 286.473701][ T6772] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.482553][ T6772] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 37430 - 0 [ 286.504316][T12605] netlink: 'syz.2.2158': attribute type 13 has an invalid length. [ 286.536854][ T6772] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 286.559228][ T6772] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.568985][ T6772] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 37430 - 0 [ 286.585682][T12605] macvtap0: entered promiscuous mode [ 286.611886][T12605] macvtap0: refused to change device tx_queue_len [ 286.663059][T12504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.670435][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2161'. [ 286.681439][T12504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.775102][T12610] veth5: entered promiscuous mode [ 286.783963][T12610] bridge2: port 1(veth5) entered blocking state [ 286.792615][T12610] bridge2: port 1(veth5) entered disabled state [ 286.802324][T12610] veth5: entered allmulticast mode [ 286.850189][T12504] team0: Port device team_slave_0 added [ 286.879244][T12504] team0: Port device team_slave_1 added [ 286.979072][T12504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.007892][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.068097][T12504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.096839][T12504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.159368][T12504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.198911][T12504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.228844][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 287.295832][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 287.423280][T12504] hsr_slave_0: entered promiscuous mode [ 287.440838][T12634] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2169'. [ 287.442697][T12504] hsr_slave_1: entered promiscuous mode [ 287.458832][T12504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.470835][T12504] Cannot create hsr debugfs directory [ 287.488733][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 287.678687][T12641] veth9: entered promiscuous mode [ 287.684310][T12641] bridge5: port 1(veth9) entered blocking state [ 287.692677][T12641] bridge5: port 1(veth9) entered disabled state [ 287.702153][T12641] veth9: entered allmulticast mode [ 287.963382][T12618] mpoa:mpoad_close: () going down [ 288.186220][ T5852] Bluetooth: hci1: command tx timeout [ 288.337237][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 288.602075][T12504] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 288.657621][T12504] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 288.695112][T12504] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 288.797367][T12504] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.048408][T12504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.092871][T12504] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.130479][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.137719][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.166858][ T24] IPVS: starting estimator thread 0... [ 289.214930][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.222172][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.275916][T12695] IPVS: using max 25 ests per chain, 60000 per kthread [ 289.375796][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 289.819305][T12720] xt_hashlimit: size too large, truncated to 1048576 [ 289.967499][T12720] syz.4.2195: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 290.046066][T12504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.064591][T12720] CPU: 0 UID: 0 PID: 12720 Comm: syz.4.2195 Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 290.064624][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.064637][T12720] Call Trace: [ 290.064646][T12720] [ 290.064656][T12720] dump_stack_lvl+0x189/0x250 [ 290.064711][T12720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.064763][T12720] ? __pfx__printk+0x10/0x10 [ 290.064787][T12720] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.064811][T12720] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.064837][T12720] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 290.064865][T12720] warn_alloc+0x214/0x310 [ 290.064897][T12720] ? __pfx_warn_alloc+0x10/0x10 [ 290.064932][T12720] ? __get_vm_area_node+0x28f/0x300 [ 290.064954][T12720] ? htable_create+0xfc/0x7a0 [ 290.064991][T12720] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 290.065050][T12720] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.065081][T12720] ? rcu_is_watching+0x15/0xb0 [ 290.065122][T12720] ? htable_create+0xfc/0x7a0 [ 290.065151][T12720] ? htable_create+0xfc/0x7a0 [ 290.065180][T12720] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 290.065202][T12720] ? htable_create+0xfc/0x7a0 [ 290.065231][T12720] ? hashlimit_pernet+0x23/0x240 [ 290.065272][T12720] htable_create+0xfc/0x7a0 [ 290.065312][T12720] hashlimit_mt_check_common+0x719/0xa10 [ 290.065358][T12720] hashlimit_mt_check_v1+0x221/0x360 [ 290.065394][T12720] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 290.065445][T12720] ? xt_find_match+0x1f7/0x250 [ 290.065482][T12720] xt_check_match+0x3d1/0xab0 [ 290.065510][T12720] ? __pfx___mutex_lock+0x10/0x10 [ 290.065540][T12720] ? __pfx_xt_check_match+0x10/0x10 [ 290.065572][T12720] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 290.065606][T12720] ? xt_find_match+0x1f7/0x250 [ 290.065643][T12720] translate_table+0x1553/0x2040 [ 290.065698][T12720] ? __pfx_translate_table+0x10/0x10 [ 290.065729][T12720] ? __might_fault+0xb0/0x130 [ 290.065784][T12720] ? _copy_from_user+0x94/0xb0 [ 290.065809][T12720] do_ip6t_set_ctl+0x970/0xce0 [ 290.065846][T12720] ? rcu_is_watching+0x15/0xb0 [ 290.065877][T12720] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 290.065928][T12720] ? __pfx___mutex_lock+0x10/0x10 [ 290.065953][T12720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.065991][T12720] ? __pfx_futex_wake+0x10/0x10 [ 290.066024][T12720] nf_setsockopt+0x26f/0x290 [ 290.066061][T12720] rawv6_setsockopt+0x23b/0x5b0 [ 290.066098][T12720] ? __lock_acquire+0xab9/0xd20 [ 290.066130][T12720] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 290.066161][T12720] ? aa_sock_opt_perm+0x74/0x110 [ 290.066188][T12720] ? sock_common_setsockopt+0x36/0xc0 [ 290.066212][T12720] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 290.066239][T12720] do_sock_setsockopt+0x25a/0x3e0 [ 290.066276][T12720] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 290.066311][T12720] ? __fget_files+0x2a/0x420 [ 290.066343][T12720] __x64_sys_setsockopt+0x18b/0x220 [ 290.066380][T12720] do_syscall_64+0xfa/0x3b0 [ 290.066404][T12720] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.066426][T12720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.066447][T12720] ? clear_bhb_loop+0x60/0xb0 [ 290.066473][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.066493][T12720] RIP: 0033:0x7fe11078e929 [ 290.066512][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.066530][T12720] RSP: 002b:00007fe1115bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.066553][T12720] RAX: ffffffffffffffda RBX: 00007fe1109b5fa0 RCX: 00007fe11078e929 [ 290.066569][T12720] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 290.066582][T12720] RBP: 00007fe110810b39 R08: 00000000000004c0 R09: 0000000000000000 [ 290.066595][T12720] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 290.066607][T12720] R13: 0000000000000000 R14: 00007fe1109b5fa0 R15: 00007ffcb9b06638 [ 290.066641][T12720] [ 290.449345][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 290.485796][T12720] Mem-Info: [ 290.489073][T12720] active_anon:6557 inactive_anon:0 isolated_anon:0 [ 290.489073][T12720] active_file:1725 inactive_file:39946 isolated_file:0 [ 290.489073][T12720] unevictable:768 dirty:188 writeback:0 [ 290.489073][T12720] slab_reclaimable:12076 slab_unreclaimable:116481 [ 290.489073][T12720] mapped:31558 shmem:3390 pagetables:1147 [ 290.489073][T12720] sec_pagetables:0 bounce:0 [ 290.489073][T12720] kernel_misc_reclaimable:0 [ 290.489073][T12720] free:1304980 free_pcp:13031 free_cma:0 [ 290.490367][T12504] veth0_vlan: entered promiscuous mode [ 290.547146][T12504] veth1_vlan: entered promiscuous mode [ 290.560354][ T5852] Bluetooth: hci1: command tx timeout [ 290.595753][T12720] Node 0 active_anon:26828kB inactive_anon:0kB active_file:6900kB inactive_file:159584kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126832kB dirty:748kB writeback:0kB shmem:12624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12304kB pagetables:4452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.633124][T12720] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.671882][T12720] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.696887][T12504] veth0_macvtap: entered promiscuous mode [ 290.710680][T12504] veth1_macvtap: entered promiscuous mode [ 290.733426][T12504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.746186][T12504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.763236][ T3547] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.795725][T12720] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 290.801589][T12720] Node 0 DMA32 free:1303936kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27860kB inactive_anon:0kB active_file:6900kB inactive_file:157760kB unevictable:1536kB writepending:740kB present:3129332kB managed:2560932kB mlocked:0kB bounce:0kB free_pcp:31976kB local_pcp:14580kB free_cma:0kB [ 290.835658][T12720] lowmem_reserve[]: 0 0 1 1 1 [ 290.840424][T12720] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 290.869530][ T3547] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.888169][T12720] lowmem_reserve[]: 0 0 0 0 0 [ 290.895438][T12720] Node 1 Normal free:3900608kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18240kB local_pcp:11520kB free_cma:0kB [ 290.941469][ T3547] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.951518][ T3547] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.962619][T12720] lowmem_reserve[]: 0 0 0 0 0 [ 290.972713][T12720] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 291.005679][T12720] Node 0 DMA32: 2*4kB (ME) 382*8kB (M) 230*16kB (UME) 199*32kB (UM) 305*64kB (UME) 162*128kB (UM) 114*256kB (UME) 60*512kB (UM) 30*1024kB (UME) 8*2048kB (UME) 279*4096kB (UM) = 1303160kB [ 291.085744][T12720] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 291.118306][T12720] Node 1 Normal: 184*4kB (UME) 58*8kB (UME) 45*16kB (UME) 146*32kB (UME) 36*64kB (UME) 10*128kB (UME) 3*256kB (ME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 948*4096kB (M) = 3900608kB [ 291.142354][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.166139][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.183470][T12720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.194504][T12720] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.197347][T12708] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 291.203949][T12720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 291.224734][T12720] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 291.234267][T12720] 45886 total pagecache pages [ 291.243190][T12720] 0 pages in swap cache [ 291.247495][T12720] Free swap = 124996kB [ 291.251784][T12720] Total swap = 124996kB [ 291.262037][T12720] 2097051 pages RAM [ 291.266627][T12720] 0 pages HighMem/MovableOnly [ 291.271477][T12720] 424712 pages reserved [ 291.277124][T12720] 0 pages cma reserved [ 291.404104][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.443228][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.455870][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 291.772256][T12504] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 291.784198][T12504] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 291.792626][T12504] CPU: 1 UID: 0 PID: 12504 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00901-gf22e6fdf7b33 #0 PREEMPT(full) [ 291.804868][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.814924][T12504] RIP: 0010:klist_remove+0x14a/0x340 [ 291.820227][T12504] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 39 c7 c5 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1a c7 c5 f6 49 8b 44 24 58 48 89 44 24 08 [ 291.839835][T12504] RSP: 0018:ffffc90003a4f840 EFLAGS: 00010202 [ 291.845906][T12504] RAX: 000000000000000b RBX: ffff8880798eda00 RCX: 0000000000000000 [ 291.853874][T12504] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 291.861843][T12504] RBP: ffffc90003a4f928 R08: ffffffff8f87bf43 R09: 1ffffffff1f0f7e8 [ 291.869818][T12504] R10: dffffc0000000000 R11: fffffbfff1f0f7e9 R12: 0000000000000000 [ 291.877793][T12504] R13: 1ffff11009710c8c R14: ffff88804b886460 R15: dffffc0000000000 [ 291.885767][T12504] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 291.894710][T12504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.901290][T12504] CR2: 000000110c332da1 CR3: 0000000033306000 CR4: 00000000003526f0 [ 291.909263][T12504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.917229][T12504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.925202][T12504] Call Trace: [ 291.928478][T12504] [ 291.931410][T12504] ? __pfx_klist_remove+0x10/0x10 [ 291.936438][T12504] ? __pfx_kobject_move+0x10/0x10 [ 291.941464][T12504] ? get_device_parent+0x366/0x3a0 [ 291.946577][T12504] device_move+0x193/0x700 [ 291.950999][T12504] hci_conn_del_sysfs+0xb8/0x170 [ 291.955951][T12504] hci_conn_del+0x8ff/0xcb0 [ 291.960459][T12504] hci_conn_hash_flush+0x191/0x230 [ 291.965580][T12504] hci_dev_close_sync+0xaef/0x1330 [ 291.970707][T12504] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 291.976254][T12504] ? up_write+0x1c4/0x420 [ 291.980592][T12504] hci_unregister_dev+0x21a/0x510 [ 291.985623][T12504] vhci_release+0x80/0xd0 [ 291.989963][T12504] ? __pfx_vhci_release+0x10/0x10 [ 291.994983][T12504] __fput+0x44c/0xa70 [ 291.998992][T12504] task_work_run+0x1d1/0x260 [ 292.003586][T12504] ? __pfx_task_work_run+0x10/0x10 [ 292.008695][T12504] ? kmem_cache_free+0x18f/0x400 [ 292.013630][T12504] do_exit+0x6b5/0x22e0 [ 292.017788][T12504] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 292.023162][T12504] ? __pfx_do_exit+0x10/0x10 [ 292.027756][T12504] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.032949][T12504] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.038148][T12504] do_group_exit+0x21c/0x2d0 [ 292.042766][T12504] __x64_sys_exit_group+0x3f/0x40 [ 292.047808][T12504] x64_sys_call+0x21ba/0x21c0 [ 292.052487][T12504] do_syscall_64+0xfa/0x3b0 [ 292.056987][T12504] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.062188][T12504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.068252][T12504] ? clear_bhb_loop+0x60/0xb0 [ 292.072926][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.078820][T12504] RIP: 0033:0x7fee3d58e929 [ 292.083234][T12504] Code: Unable to access opcode bytes at 0x7fee3d58e8ff. [ 292.090249][T12504] RSP: 002b:00007ffeb6a37ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 292.098669][T12504] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee3d58e929 [ 292.106644][T12504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 292.114612][T12504] RBP: 00007fee3d5ee8f0 R08: 00007ffeb6a35857 R09: 0000000000000003 [ 292.122578][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.130545][T12504] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffeb6a37c70 [ 292.138528][T12504] [ 292.141545][T12504] Modules linked in: [ 292.146380][T12504] ---[ end trace 0000000000000000 ]--- [ 292.173701][T12504] RIP: 0010:klist_remove+0x14a/0x340 [ 292.179154][T12504] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 39 c7 c5 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 1a c7 c5 f6 49 8b 44 24 58 48 89 44 24 08 [ 292.201056][T12504] RSP: 0018:ffffc90003a4f840 EFLAGS: 00010202 [ 292.215745][T12504] RAX: 000000000000000b RBX: ffff8880798eda00 RCX: 0000000000000000 [ 292.223759][T12504] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 292.231920][T12504] RBP: ffffc90003a4f928 R08: ffffffff8f87bf43 R09: 1ffffffff1f0f7e8 [ 292.239991][T12504] R10: dffffc0000000000 R11: fffffbfff1f0f7e9 R12: 0000000000000000 [ 292.248322][T12504] R13: 1ffff11009710c8c R14: ffff88804b886460 R15: dffffc0000000000 [ 292.256580][T12504] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 292.265522][T12504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.272206][T12504] CR2: 00007fe110981178 CR3: 0000000034108000 CR4: 00000000003526f0 [ 292.280411][T12504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.288462][T12504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.298274][T12504] Kernel panic - not syncing: Fatal exception [ 292.304661][T12504] Kernel Offset: disabled [ 292.308982][T12504] Rebooting in 86400 seconds..